This paper proposes a management framework which can effectively solve the security problem of E-commerce. And classifies the assets of E-commerce system, assesses security risks with a method which integrates qualitative methods and quantitative methods, and gives the hierarchal structure of E-commerce security policies. In this framework security repository is established by using Web Ontology Language (OWL), which makes security information is easily identified by computers and realizes intelligent and dynamic security management.
李慧,刘东苏,王玙 . 基于OWL的电子商务安全管理框架[J]. 现代图书情报技术, 2006, 1(11): 69-72.
Li Hui,Liu Dongsu,Wang Yu . A Security Management Framework for E-commerce Based on OWL. New Technology of Library and Information Service, 2006, 1(11): 69-72.
1Whe Dar Lin. Toward a Security EC Transaction on Web. EC-Web 2003, LNCS 2738,115-124
2Kleist V F. A Transaction Cost Model of Electronic Trust:Transactional Return, Incentives for NetworkSecurity and Optimal Risk in the Digital Economy. Electronic Commerce Research, 2004(4): 41–57
3傅少川,张文杰,马军.电子商务风险分析及定性评估方法研究. 情报杂志，2005,24(5):17-19
4王绍斌,洪帆,朱贤. 一种新的基于电子现金的电子商务模型与协议.计算机工程与应用,2004, 40(17):32-35
(下转第6页)5W3C. RDF For Web Service Policy Assertions. http://www.w3.org/2004/08/20-ws-pol-pos/ ( Accessed May.6,2006)
6B. Moore, E. Ellesson, J. Strassner, A. Westerinen. Policy Core Information Model——Version 1 Specification. http://rfc.net/rfc3060.html ( Accessed May.6,2006)
7David Martin, Mark Burstein, etc. OWL-S: Semantic Markup for Web Services. http://www.daml.org/services/owl-s/1.0/owl-s.html ( Accessed May.6,2006)
