Paper proposes atomic security concerns as a shared security vocabulary
Original title: Atomic Security Concerns: Towards a Foundational Language for Security Knowledge Representation
The contribution is conceptual and does not formalize or evaluate a working cybersecurity language.
A conceptual paper introduces Security Concerns and Atomic Security Concerns as a proposed common layer for representing cybersecurity knowledge used in governance, risk, compliance, and architecture. It hypothesizes that widely used concepts such as properties, controls, risks, and compliance requirements can be composed from a finite set of foundational concerns, analogously to atoms in chemistry. Concern sets would then express relationships that current heterogeneous vocabularies leave to expert judgment. The authors frame the work as a research hypothesis for later formalization, not a completed language or tool.
Unconfirmed: Whether a finite set of atomic concerns can represent cybersecurity knowledge remains a hypothesis.
- ASCs are proposed as domain-independent and granularity-independent abstractions.
- The paper does not report an implementation or empirical evaluation.
- Target uses include reasoning across controls, risks, and compliance requirements.
From the original article
1 min read at arxiv.orgCybersecurity governance, risk management, compliance, and security architecture rely on numerous concepts, including security properties, domains, controls, risks, implementation measures, capabilities, and compliance requirements.
By Hanane Houmani · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.