<?xml version='1.0' encoding='iso '?> <!DOCTYPE rdf:rdf [ <!ENTITY rdf ' <!

Transcription

1 <?xml version='1.0' encoding='iso '?> <!DOCTYPE rdf:rdf [ <!ENTITY rdf ' <!ENTITY a ' <!ENTITY cna_ontology ' <!ENTITY rdfs ' ]> <rdf:rdf xmlns:rdf="&rdf;" xmlns:a="&a;" xmlns:cna_ontology="&cna_ontology;" xmlns:rdfs="&rdfs;"> <rdf:property rdf:about="&cna_ontology;agency_name" rdfs:label="agency_name"> <rdfs:class rdf:about="&cna_ontology;air_force" rdfs:label="air_force"> <rdfs:subclassof rdf:resource="&cna_ontology;military"/> <rdfs:class rdf:about="&cna_ontology;appliance" rdfs:label="appliance"> <rdfs:subclassof rdf:resource="&cna_ontology;hardware"/> <rdfs:class rdf:about="&cna_ontology;application" rdfs:label="application"> <rdfs:subclassof rdf:resource="&cna_ontology;software"/> <rdf:property rdf:about="&cna_ontology;application_vulnerability" rdfs:label="application_vulnerability"> <rdfs:domain rdf:resource="&cna_ontology;application"/> <rdfs:class rdf:about="&cna_ontology;army" rdfs:label="army"> <rdfs:subclassof rdf:resource="&cna_ontology;military"/> <rdfs:class rdf:about="&cna_ontology;attack" rdfs:label="attack"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdf:property rdf:about="&cna_ontology;attack_name" rdfs:label="attack_name"> <rdfs:domain rdf:resource="&cna_ontology;attack"/> <rdf:property rdf:about="&cna_ontology;attack_type" rdfs:label="attack_type"> <rdfs:range rdf:resource="&cna_ontology;attack"/> <rdfs:class rdf:about="&cna_ontology;attacker" rdfs:label="attacker"> <rdfs:subclassof rdf:resource="&cna_ontology;person"/> <rdf:property rdf:about="&cna_ontology;author" rdfs:label="author"> <rdfs:domain rdf:resource="&cna_ontology;software"/> <rdfs:class rdf:about="&cna_ontology;backdoor_trojan" rdfs:label="backdoor_trojan"> <rdfs:subclassof rdf:resource="&cna_ontology;local_attack"/> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:class rdf:about="&cna_ontology;buffer_overflow" rdfs:label="buffer_overflow">

2 <rdfs:subclassof rdf:resource="&cna_ontology;local_attack"/> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:subclassof rdf:resource="&cna_ontology;remote_attack"/> <rdfs:class rdf:about="&cna_ontology;chat" rdfs:label="chat"> <rdfs:subclassof rdf:resource="&cna_ontology;communications"/> <rdfs:class rdf:about="&cna_ontology;city" rdfs:label="city"> <rdfs:subclassof rdf:resource="&cna_ontology;nation_state"/> <rdf:property rdf:about="&cna_ontology;city_name" rdfs:label="city_name"> <rdfs:domain rdf:resource="&cna_ontology;city"/> <rdf:property rdf:about="&cna_ontology;comany_name" rdfs:label="comany_name"> <rdfs:class rdf:about="&cna_ontology;communications" rdfs:label="communications"> <rdf:property rdf:about="&cna_ontology;company_revenues_kdollars" a:range="integer" rdfs:label="company_revenues_kdollars"> <rdfs:domain rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;computer_related_thing" rdfs:label="computer_related_thing"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdf:property rdf:about="&cna_ontology;continent" rdfs:label="continent"> <rdfs:domain rdf:resource="&cna_ontology;nation_state"/> <rdfs:class rdf:about="&cna_ontology;contractor" rdfs:label="contractor"> <rdfs:subclassof rdf:resource="&cna_ontology;local_security_professional"/> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;database" rdfs:label="database"> <rdfs:class rdf:about="&cna_ontology;day" rdfs:label="day"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdfs:class rdf:about="&cna_ontology;defender" rdfs:label="defender"> <rdfs:subclassof rdf:resource="&cna_ontology;person"/> <rdfs:class rdf:about="&cna_ontology;denial_of_service" rdfs:label="denial_of_service"> <rdfs:subclassof rdf:resource="&cna_ontology;local_attack"/> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:subclassof rdf:resource="&cna_ontology;remote_attack"/> <rdf:property rdf:about="&cna_ontology;desintation_ip_addr"

3 rdfs:label="desintation_ip_addr"> <rdfs:domain rdf:resource="&cna_ontology;ip"/> <rdf:property rdf:about="&cna_ontology;destination_ip" rdfs:label="destination_ip"> <rdfs:class rdf:about="&cna_ontology;disconnected_host" rdfs:label="disconnected_host"> <rdfs:subclassof rdf:resource="&cna_ontology;personal_computer"/> <rdfs:class rdf:about="&cna_ontology;distributed_denial_of_service" rdfs:label="distributed_denial_of_service"> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:subclassof rdf:resource="&cna_ontology;remote_attack"/> <rdf:property rdf:about="&cna_ontology;domain" rdfs:label="domain"> <rdfs:domain rdf:resource="&cna_ontology;appliance"/> <rdfs:class rdf:about="&cna_ontology;e_mail" rdfs:label="e_mail"> <rdfs:subclassof rdf:resource="&cna_ontology;communications"/> <rdfs:class rdf:about="&cna_ontology;educational_institution" rdfs:label="educational_institution"> <rdfs:subclassof rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;energy" rdfs:label="energy"> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdf:property rdf:about="&cna_ontology;event_attacker" rdfs:label="event_attacker"> <rdfs:range rdf:resource="&cna_ontology;attacker"/> <rdf:property rdf:about="&cna_ontology;event_destination_ip" rdfs:label="event_destination_ip"> <rdfs:range rdf:resource="&cna_ontology;ip"/> <rdf:property rdf:about="&cna_ontology;event_destination_port" rdfs:label="event_destination_port"> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:allowedclasses rdf:resource="&cna_ontology;tcp"/> <a:allowedclasses rdf:resource="&cna_ontology;udp"/> <rdf:property rdf:about="&cna_ontology;event_icmp_code" rdfs:label="event_icmp_code"> <rdfs:range rdf:resource="&cna_ontology;icmp"/> <rdf:property rdf:about="&cna_ontology;event_icmp_type" rdfs:label="event_icmp_type"> <rdfs:range rdf:resource="&cna_ontology;icmp"/> <rdfs:class rdf:about="&cna_ontology;event_report"

4 rdfs:label="event_report"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdf:property rdf:about="&cna_ontology;event_source_country" rdfs:label="event_source_country"> <rdfs:range rdf:resource="&cna_ontology;nation_state"/> <rdf:property rdf:about="&cna_ontology;event_source_ip" rdfs:label="event_source_ip"> <rdfs:range rdf:resource="&cna_ontology;ip"/> <rdf:property rdf:about="&cna_ontology;event_source_port" rdfs:label="event_source_port"> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:allowedclasses rdf:resource="&cna_ontology;tcp"/> <a:allowedclasses rdf:resource="&cna_ontology;udp"/> <rdf:property rdf:about="&cna_ontology;event_type" rdfs:label="event_type"> <rdf:property rdf:about="&cna_ontology;event_victim" rdfs:label="event_victim"> <rdfs:range rdf:resource="&cna_ontology;organization"/> <rdf:property rdf:about="&cna_ontology;event_victim_country" rdfs:label="event_victim_country"> <rdfs:range rdf:resource="&cna_ontology;nation_state"/> <rdfs:class rdf:about="&cna_ontology;file_sharing" rdfs:label="file_sharing"> <rdfs:class rdf:about="&cna_ontology;financial_institution" rdfs:label="financial_institution"> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;foreign_affairs" rdfs:label="foreign_affairs"> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:class rdf:about="&cna_ontology;foreign_government" rdfs:label="foreign_government"> <rdfs:subclassof rdf:resource="&cna_ontology;attacker"/> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:class rdf:about="&cna_ontology;geo-location" rdfs:label="geo-location"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdfs:class rdf:about="&cna_ontology;game" rdfs:label="game"> <rdf:property rdf:about="&cna_ontology;general_domain"

5 rdfs:label="general_domain"> <rdfs:domain rdf:resource="&cna_ontology;application"/> <rdfs:class rdf:about="&cna_ontology;government_agency" rdfs:label="government_agency"> <rdfs:subclassof rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;government_agent" rdfs:label="government_agent"> <rdfs:subclassof rdf:resource="&cna_ontology;local_security_professional"/> <rdf:property rdf:about="&cna_ontology;hq_location" rdfs:label="hq_location"> <rdfs:class rdf:about="&cna_ontology;hacker_group" rdfs:label="hacker_group"> <rdfs:subclassof rdf:resource="&cna_ontology;attacker"/> <rdfs:class rdf:about="&cna_ontology;hardware" rdfs:label="hardware"> <rdfs:subclassof rdf:resource="&cna_ontology;computer_related_thing"/> <rdfs:class rdf:about="&cna_ontology;hour" rdfs:label="hour"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdfs:class rdf:about="&cna_ontology;icmp" rdfs:label="icmp"> <rdfs:subclassof rdf:resource="&cna_ontology;ip"/> <rdfs:subclassof rdf:resource="&cna_ontology;networking_protocol"/> <rdf:property rdf:about="&cna_ontology;icmp_code" a:range="integer" rdfs:label="icmp_code"> <rdfs:domain rdf:resource="&cna_ontology;icmp"/> <rdf:property rdf:about="&cna_ontology;icmp_type" a:range="integer" rdfs:label="icmp_type"> <rdfs:domain rdf:resource="&cna_ontology;icmp"/> <rdfs:class rdf:about="&cna_ontology;ip" rdfs:label="ip"> <rdfs:subclassof rdf:resource="&cna_ontology;networking_protocol"/> <rdfs:class rdf:about="&cna_ontology;industrial_manufacturing" rdfs:label="industrial_manufacturing"> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;interior" rdfs:label="interior"> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:class rdf:about="&cna_ontology;intrusion_detection_system" rdfs:label="intrusion_detection_system"> <rdfs:subclassof rdf:resource="&cna_ontology;appliance"/> <rdf:property rdf:about="&cna_ontology;latitude" rdfs:label="latitude"> <rdfs:domain rdf:resource="&cna_ontology;geo-location"/>

6 <rdfs:class rdf:about="&cna_ontology;law_justice" rdfs:label="law_justice"> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:class rdf:about="&cna_ontology;local_attack" rdfs:label="local_attack"> <rdfs:subclassof rdf:resource="&cna_ontology;attack"/> <rdfs:class rdf:about="&cna_ontology;local_security_professional" rdfs:label="local_security_professional"> <rdfs:subclassof rdf:resource="&cna_ontology;defender"/> <rdfs:subclassof rdf:resource="&cna_ontology;person"/> <rdf:property rdf:about="&cna_ontology;longitude" rdfs:label="longitude"> <rdfs:domain rdf:resource="&cna_ontology;geo-location"/> <rdfs:class rdf:about="&cna_ontology;malicious_code" rdfs:label="malicious_code"> <rdf:property rdf:about="&cna_ontology;manufacturer" rdfs:label="manufacturer"> <rdfs:domain rdf:resource="&cna_ontology;hardware"/> <rdfs:class rdf:about="&cna_ontology;medical" rdfs:label="medical"> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;military" rdfs:label="military"> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:class rdf:about="&cna_ontology;minute" rdfs:label="minute"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdfs:class rdf:about="&cna_ontology;month" rdfs:label="month"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdf:property rdf:about="&cna_ontology;name" rdfs:label="name"> <rdfs:domain rdf:resource="&cna_ontology;person"/> <rdf:property rdf:about="&cna_ontology;nation_name" rdfs:label="nation_name"> <rdfs:domain rdf:resource="&cna_ontology;nation_state"/> <rdfs:class rdf:about="&cna_ontology;nation_state" rdfs:label="nation_state"> <rdfs:subclassof rdf:resource="&cna_ontology;geo-location"/> <rdfs:class rdf:about="&cna_ontology;navy" rdfs:label="navy"> <rdfs:subclassof rdf:resource="&cna_ontology;military"/> <rdfs:class rdf:about="&cna_ontology;networked_host" rdfs:label="networked_host"> <rdfs:subclassof rdf:resource="&cna_ontology;personal_computer"/>

7 <rdfs:class rdf:about="&cna_ontology;networking_protocol" a:role="abstract" rdfs:label="networking_protocol"> <rdfs:subclassof rdf:resource="&cna_ontology;software"/> <rdf:property rdf:about="&cna_ontology;num_of_members" a:range="integer" rdfs:label="num_of_members"> <rdfs:domain rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;operating_system" rdfs:label="operating_system"> <rdfs:subclassof rdf:resource="&cna_ontology;software"/> <rdf:property rdf:about="&cna_ontology;org_location" rdfs:label="org_location"> <rdfs:domain rdf:resource="&cna_ontology;organization"/> <rdf:property rdf:about="&cna_ontology;org_name" rdfs:label="org_name"> <rdfs:domain rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;organization" rdfs:label="organization"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdf:property rdf:about="&cna_ontology;parent_organization" rdfs:label="parent_organization"> <rdfs:range rdf:resource="&cna_ontology;government_agency"/> <rdfs:domain rdf:resource="&cna_ontology;government_agent"/> <rdf:property rdf:about="&cna_ontology;perpetrator" rdfs:label="perpetrator"> <rdfs:domain rdf:resource="&cna_ontology;attack"/> <rdfs:class rdf:about="&cna_ontology;person" rdfs:label="person"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdfs:class rdf:about="&cna_ontology;personal_computer" rdfs:label="personal_computer"> <rdfs:subclassof rdf:resource="&cna_ontology;hardware"/> <rdf:property rdf:about="&cna_ontology;position_title" rdfs:label="position_title"> <rdfs:domain rdf:resource="&cna_ontology;person"/> <rdf:property rdf:about="&cna_ontology;primary_application" rdfs:label="primary_application"> <rdfs:domain rdf:resource="&cna_ontology;server"/> <rdfs:class rdf:about="&cna_ontology;primary_school" rdfs:label="primary_school"> <rdfs:subclassof rdf:resource="&cna_ontology;educational_institution"/>

8 <rdfs:class rdf:about="&cna_ontology;printer" rdfs:label="printer"> <rdfs:subclassof rdf:resource="&cna_ontology;hardware"/> <rdfs:class rdf:about="&cna_ontology;private_citizen" rdfs:label="private_citizen"> <rdfs:subclassof rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;private_company" rdfs:label="private_company"> <rdfs:subclassof rdf:resource="&cna_ontology;organization"/> <rdf:property rdf:about="&cna_ontology;regional_office" rdfs:label="regional_office"> <rdfs:domain rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;remote_administration" rdfs:label="remote_administration"> <rdfs:class rdf:about="&cna_ontology;remote_attack" rdfs:label="remote_attack"> <rdfs:subclassof rdf:resource="&cna_ontology;attack"/> <rdfs:class rdf:about="&cna_ontology;remote_shell" rdfs:label="remote_shell"> <rdf:property rdf:about="&cna_ontology;report_author" rdfs:label="report_author"> <rdfs:range rdf:resource="&cna_ontology;defender"/> <rdf:property rdf:about="&cna_ontology;report_date" rdfs:label="report_date"> <rdfs:range rdf:resource="&cna_ontology;time"/> <rdf:property rdf:about="&cna_ontology;report_org" rdfs:label="report_org"> <rdfs:range rdf:resource="&cna_ontology;organization"/> <rdfs:class rdf:about="&cna_ontology;router" rdfs:label="router"> <rdfs:subclassof rdf:resource="&cna_ontology;hardware"/> <rdf:property rdf:about="&cna_ontology;salary" a:range="float" rdfs:label="salary"> <rdfs:domain rdf:resource="&cna_ontology;person"/> <rdfs:class rdf:about="&cna_ontology;scan_tool" rdfs:label="scan_tool"> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:class rdf:about="&cna_ontology;script_kiddie" rdfs:label="script_kiddie"> <rdfs:subclassof rdf:resource="&cna_ontology;attacker"/> <rdfs:class rdf:about="&cna_ontology;second"

9 rdfs:label="second"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdfs:class rdf:about="&cna_ontology;secondary_school" rdfs:label="secondary_school"> <rdfs:subclassof rdf:resource="&cna_ontology;educational_institution"/> <rdfs:class rdf:about="&cna_ontology;server" rdfs:label="server"> <rdfs:subclassof rdf:resource="&cna_ontology;hardware"/> <rdf:property rdf:about="&cna_ontology;session_start_time" rdfs:label="session_start_time"> <rdfs:domain rdf:resource="&cna_ontology;tcp"/> <rdf:property rdf:about="&cna_ontology;session_stop_time" rdfs:label="session_stop_time"> <rdfs:domain rdf:resource="&cna_ontology;tcp"/> <rdf:property rdf:about="&cna_ontology;session_type" rdfs:label="session_type"> <rdfs:domain rdf:resource="&cna_ontology;tcp"/> <rdf:property rdf:about="&cna_ontology;sex" rdfs:label="sex"> <rdfs:domain rdf:resource="&cna_ontology;person"/> <rdf:property rdf:about="&cna_ontology;size_kbytes" a:range="integer" rdfs:label="size_kbytes"> <rdfs:domain rdf:resource="&cna_ontology;software"/> <rdfs:class rdf:about="&cna_ontology;skilled_hacker" rdfs:label="skilled_hacker"> <rdfs:subclassof rdf:resource="&cna_ontology;attacker"/> <rdfs:class rdf:about="&cna_ontology;software" rdfs:label="software"> <rdfs:subclassof rdf:resource="&cna_ontology;computer_related_thing"/> <rdf:property rdf:about="&cna_ontology;source_ip" rdfs:label="source_ip"> <rdf:property rdf:about="&cna_ontology;source_ip_addr" rdfs:label="source_ip_addr"> <rdfs:domain rdf:resource="&cna_ontology;ip"/> <rdfs:class rdf:about="&cna_ontology;tcp" rdfs:label="tcp"> <rdfs:subclassof rdf:resource="&cna_ontology;ip"/> <rdfs:subclassof rdf:resource="&cna_ontology;networking_protocol"/> <rdf:property rdf:about="&cna_ontology;tcp_destination_port" a:maxvalue=" " a:minvalue="0.0"

10 a:range="integer" rdfs:label="tcp_destination_port"> <rdfs:domain rdf:resource="&cna_ontology;tcp"/> <rdf:property rdf:about="&cna_ontology;tcp_source_port" a:maxvalue=" " a:minvalue="0.0" a:range="integer" rdfs:label="tcp_source_port"> <rdfs:domain rdf:resource="&cna_ontology;tcp"/> <rdfs:class rdf:about="&cna_ontology;telecom" rdfs:label="telecom"> <rdfs:subclassof rdf:resource="&cna_ontology;government_agency"/> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdfs:class rdf:about="&cna_ontology;time" a:role="abstract" rdfs:label="time"> <rdfs:subclassof rdf:resource="&rdfs;resource"/> <rdf:property rdf:about="&cna_ontology;transaction_type" rdfs:label="transaction_type"> <rdfs:domain rdf:resource="&cna_ontology;udp"/> <rdfs:class rdf:about="&cna_ontology;transportation" rdfs:label="transportation"> <rdfs:subclassof rdf:resource="&cna_ontology;private_company"/> <rdf:property rdf:about="&cna_ontology;type" rdfs:label="type"> <rdfs:domain rdf:resource="&cna_ontology;operating_system"/> <rdfs:class rdf:about="&cna_ontology;udp" rdfs:label="udp"> <rdfs:subclassof rdf:resource="&cna_ontology;ip"/> <rdfs:subclassof rdf:resource="&cna_ontology;networking_protocol"/> <rdf:property rdf:about="&cna_ontology;udp_destination_port" a:maxvalue=" " a:minvalue="0.0" a:range="integer" rdfs:label="udp_destination_port"> <rdfs:domain rdf:resource="&cna_ontology;udp"/> <rdf:property rdf:about="&cna_ontology;udp_source_port" a:maxvalue=" " a:minvalue="0.0" a:range="integer" rdfs:label="udp_source_port"> <rdfs:domain rdf:resource="&cna_ontology;udp"/> <rdfs:class rdf:about="&cna_ontology;university" rdfs:label="university"> <rdfs:subclassof rdf:resource="&cna_ontology;educational_institution"/> <rdf:property rdf:about="&cna_ontology;victim_application"

11 rdfs:label="victim_application"> <rdfs:domain rdf:resource="&cna_ontology;malicious_code"/> <rdf:property rdf:about="&cna_ontology;victim_hardware" rdfs:label="victim_hardware"> <rdfs:range rdf:resource="&cna_ontology;hardware"/> <rdf:property rdf:about="&cna_ontology;victim_os" rdfs:label="victim_os"> <rdfs:range rdf:resource="&cna_ontology;operating_system"/> <rdf:property rdf:about="&cna_ontology;victim_application" rdfs:label="victim_application"> <rdfs:range rdf:resource="&cna_ontology;application"/> <rdfs:class rdf:about="&cna_ontology;virus" rdfs:label="virus"> <rdfs:subclassof rdf:resource="&cna_ontology;local_attack"/> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:class rdf:about="&cna_ontology;web_server" rdfs:label="web_server"> <rdfs:class rdf:about="&cna_ontology;worm" rdfs:label="worm"> <rdfs:subclassof rdf:resource="&cna_ontology;malicious_code"/> <rdfs:subclassof rdf:resource="&cna_ontology;remote_attack"/> <rdfs:class rdf:about="&cna_ontology;year" rdfs:label="year"> <rdfs:subclassof rdf:resource="&cna_ontology;time"/> <rdf:property rdf:about="&cna_ontology;cna-ontology_00012" rdfs:label="cna-ontology_00012"> <rdf:property rdf:about="&cna_ontology;cna-ontology_00169" rdfs:label="cna-ontology_00169"> <rdf:property rdf:about="&cna_ontology;program_name" rdfs:label="program_name"> <rdfs:domain rdf:resource="&cna_ontology;software"/> <a:overridingproperty rdf:about="&a;appliance_domain" > <a:domain rdf:resource="&cna_ontology;appliance"/> <a:overriddenproperty rdf:resource="&cna_ontology;domain"/> <a:overridingproperty rdf:about="&a;application_application_vulnerability" > <a:domain rdf:resource="&cna_ontology;application"/> <a:overriddenproperty rdf:resource="&cna_ontology;application_vulnerability"/> <a:overridingproperty rdf:about="&a;application_general_domain" >

12 <a:domain rdf:resource="&cna_ontology;application"/> <a:overriddenproperty rdf:resource="&cna_ontology;general_domain"/> <a:overridingproperty rdf:about="&a;attack_attack_name" > <a:domain rdf:resource="&cna_ontology;attack"/> <a:overriddenproperty rdf:resource="&cna_ontology;attack_name"/> <a:overridingproperty rdf:about="&a;attack_perpetrator" > <a:domain rdf:resource="&cna_ontology;attack"/> <a:overriddenproperty rdf:resource="&cna_ontology;perpetrator"/> <a:overridingproperty rdf:about="&a;city_city_name" > <a:domain rdf:resource="&cna_ontology;city"/> <a:overriddenproperty rdf:resource="&cna_ontology;city_name"/> <a:overridingproperty rdf:about="&a;event_report_attack_type" > <rdfs:range rdf:resource="&cna_ontology;attack"/> <a:overriddenproperty rdf:resource="&cna_ontology;attack_type"/> <a:overridingproperty rdf:about="&a;event_report_event_attacker" > <rdfs:range rdf:resource="&cna_ontology;attacker"/> <a:overriddenproperty rdf:resource="&cna_ontology;event_attacker"/> <a:overridingproperty rdf:about="&a;event_report_event_destination_ip" > <a:overriddenproperty rdf:resource="&cna_ontology;event_destination_ip"/> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:overridingproperty rdf:about="&a;event_report_event_destination_port" > <a:overriddenproperty rdf:resource="&cna_ontology;event_destination_port"/> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:allowedclasses rdf:resource="&cna_ontology;tcp"/> <a:allowedclasses rdf:resource="&cna_ontology;udp"/> <a:overridingproperty rdf:about="&a;event_report_event_icmp_code" > <a:overriddenproperty rdf:resource="&cna_ontology;event_icmp_code"/> <rdfs:range rdf:resource="&cna_ontology;icmp"/> <a:overridingproperty rdf:about="&a;event_report_event_icmp_type" > <a:overriddenproperty rdf:resource="&cna_ontology;event_icmp_type"/> <rdfs:range rdf:resource="&cna_ontology;icmp"/> <a:overridingproperty rdf:about="&a;event_report_event_source_country" > <a:overriddenproperty rdf:resource="&cna_ontology;event_source_country"/> <rdfs:range rdf:resource="&cna_ontology;nation_state"/> <a:overridingproperty rdf:about="&a;event_report_event_source_ip"

13 > <a:overriddenproperty rdf:resource="&cna_ontology;event_source_ip"/> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:overridingproperty rdf:about="&a;event_report_event_source_port" > <a:overriddenproperty rdf:resource="&cna_ontology;event_source_port"/> <rdfs:range rdf:resource="&cna_ontology;ip"/> <a:allowedclasses rdf:resource="&cna_ontology;tcp"/> <a:allowedclasses rdf:resource="&cna_ontology;udp"/> <a:overridingproperty rdf:about="&a;event_report_event_victim" > <a:overriddenproperty rdf:resource="&cna_ontology;event_victim"/> <rdfs:range rdf:resource="&cna_ontology;organization"/> <a:overridingproperty rdf:about="&a;event_report_event_victim_country" > <a:overriddenproperty rdf:resource="&cna_ontology;event_victim_country"/> <rdfs:range rdf:resource="&cna_ontology;nation_state"/> <a:overridingproperty rdf:about="&a;event_report_report_author" > <rdfs:range rdf:resource="&cna_ontology;defender"/> <a:overriddenproperty rdf:resource="&cna_ontology;report_author"/> <a:overridingproperty rdf:about="&a;event_report_report_date" > <a:overriddenproperty rdf:resource="&cna_ontology;report_date"/> <rdfs:range rdf:resource="&cna_ontology;time"/> <a:overridingproperty rdf:about="&a;event_report_report_org" > <rdfs:range rdf:resource="&cna_ontology;organization"/> <a:overriddenproperty rdf:resource="&cna_ontology;report_org"/> <a:overridingproperty rdf:about="&a;event_report_victim_hardware" > <rdfs:range rdf:resource="&cna_ontology;hardware"/> <a:overriddenproperty rdf:resource="&cna_ontology;victim_hardware"/> <a:overridingproperty rdf:about="&a;event_report_victim_os" > <rdfs:range rdf:resource="&cna_ontology;operating_system"/> <a:overriddenproperty rdf:resource="&cna_ontology;victim_os"/> <a:overridingproperty rdf:about="&a;event_report_victim_application" > <rdfs:range rdf:resource="&cna_ontology;application"/> <a:overriddenproperty rdf:resource="&cna_ontology;victim_application"/> <a:overridingproperty rdf:about="&a;geo-location_latitude" > <a:domain rdf:resource="&cna_ontology;geo-location"/> <a:overriddenproperty rdf:resource="&cna_ontology;latitude"/>

14 <a:overridingproperty rdf:about="&a;geo-location_longitude" > <a:domain rdf:resource="&cna_ontology;geo-location"/> <a:overriddenproperty rdf:resource="&cna_ontology;longitude"/> <a:overridingproperty rdf:about="&a;government_agent_parent_organization" > <rdfs:range rdf:resource="&cna_ontology;government_agency"/> <a:domain rdf:resource="&cna_ontology;government_agent"/> <a:overriddenproperty rdf:resource="&cna_ontology;parent_organization"/> <a:overridingproperty rdf:about="&a;hardware_manufacturer" > <a:domain rdf:resource="&cna_ontology;hardware"/> <a:overriddenproperty rdf:resource="&cna_ontology;manufacturer"/> <a:overridingproperty rdf:about="&a;icmp_icmp_code" <a:domain rdf:resource="&cna_ontology;icmp"/> <a:overriddenproperty rdf:resource="&cna_ontology;icmp_code"/> <a:overridingproperty rdf:about="&a;icmp_icmp_type" <a:domain rdf:resource="&cna_ontology;icmp"/> <a:overriddenproperty rdf:resource="&cna_ontology;icmp_type"/> <a:overridingproperty rdf:about="&a;ip_desintation_ip_addr" > <a:overriddenproperty rdf:resource="&cna_ontology;desintation_ip_addr"/> <a:domain rdf:resource="&cna_ontology;ip"/> <a:overridingproperty rdf:about="&a;ip_source_ip_addr" > <a:domain rdf:resource="&cna_ontology;ip"/> <a:overriddenproperty rdf:resource="&cna_ontology;source_ip_addr"/> <a:overridingproperty rdf:about="&a;malicious_code_victim_application" > <a:domain rdf:resource="&cna_ontology;malicious_code"/> <a:overriddenproperty rdf:resource="&cna_ontology;victim_application"/> <a:overridingproperty rdf:about="&a;nation_state_continent" > <a:overriddenproperty rdf:resource="&cna_ontology;continent"/> <a:domain rdf:resource="&cna_ontology;nation_state"/> <a:overridingproperty rdf:about="&a;nation_state_nation_name" > <a:overriddenproperty rdf:resource="&cna_ontology;nation_name"/> <a:domain rdf:resource="&cna_ontology;nation_state"/>

15 <a:overridingproperty rdf:about="&a;operating_system_type" > <a:domain rdf:resource="&cna_ontology;operating_system"/> <a:overriddenproperty rdf:resource="&cna_ontology;type"/> <a:overridingproperty rdf:about="&a;organization_num_of_members" <a:overriddenproperty rdf:resource="&cna_ontology;num_of_members"/> <a:domain rdf:resource="&cna_ontology;organization"/> <a:overridingproperty rdf:about="&a;organization_org_location" > <a:overriddenproperty rdf:resource="&cna_ontology;org_location"/> <a:domain rdf:resource="&cna_ontology;organization"/> <a:overridingproperty rdf:about="&a;organization_org_name" > <a:overriddenproperty rdf:resource="&cna_ontology;org_name"/> <a:domain rdf:resource="&cna_ontology;organization"/> <a:overridingproperty rdf:about="&a;organization_regional_office" > <a:domain rdf:resource="&cna_ontology;organization"/> <a:overriddenproperty rdf:resource="&cna_ontology;regional_office"/> <a:overridingproperty rdf:about="&a;person_name" > <a:overriddenproperty rdf:resource="&cna_ontology;name"/> <a:domain rdf:resource="&cna_ontology;person"/> <a:overridingproperty rdf:about="&a;person_position_title" > <a:domain rdf:resource="&cna_ontology;person"/> <a:overriddenproperty rdf:resource="&cna_ontology;position_title"/> <a:overridingproperty rdf:about="&a;person_salary" a:range="float"> <a:domain rdf:resource="&cna_ontology;person"/> <a:overriddenproperty rdf:resource="&cna_ontology;salary"/> <a:overridingproperty rdf:about="&a;person_sex" > <a:domain rdf:resource="&cna_ontology;person"/> <a:overriddenproperty rdf:resource="&cna_ontology;sex"/> <a:overridingproperty rdf:about="&a;private_company_company_revenues_kdollars" <a:overriddenproperty rdf:resource="&cna_ontology;company_revenues_kdollars"/> <a:domain rdf:resource="&cna_ontology;private_company"/> <a:overridingproperty rdf:about="&a;server_primary_application" > <a:overriddenproperty rdf:resource="&cna_ontology;primary_application"/> <a:domain rdf:resource="&cna_ontology;server"/>

16 <a:overridingproperty rdf:about="&a;software_author" > <a:overriddenproperty rdf:resource="&cna_ontology;author"/> <a:domain rdf:resource="&cna_ontology;software"/> <a:overridingproperty rdf:about="&a;software_size_kbytes" <a:overriddenproperty rdf:resource="&cna_ontology;size_kbytes"/> <a:domain rdf:resource="&cna_ontology;software"/> <a:overridingproperty rdf:about="&a;software_program_name" > <a:domain rdf:resource="&cna_ontology;software"/> <a:overriddenproperty rdf:resource="&cna_ontology;program_name"/> <a:overridingproperty rdf:about="&a;tcp_session_start_time" > <a:overriddenproperty rdf:resource="&cna_ontology;session_start_time"/> <a:domain rdf:resource="&cna_ontology;tcp"/> <a:overridingproperty rdf:about="&a;tcp_session_stop_time" > <a:overriddenproperty rdf:resource="&cna_ontology;session_stop_time"/> <a:domain rdf:resource="&cna_ontology;tcp"/> <a:overridingproperty rdf:about="&a;tcp_session_type" > <a:overriddenproperty rdf:resource="&cna_ontology;session_type"/> <a:domain rdf:resource="&cna_ontology;tcp"/> <a:overridingproperty rdf:about="&a;tcp_tcp_destination_port" a:maxvalue=" " a:minvalue="0.0" <a:domain rdf:resource="&cna_ontology;tcp"/> <a:overriddenproperty rdf:resource="&cna_ontology;tcp_destination_port"/> <a:overridingproperty rdf:about="&a;tcp_tcp_source_port" a:maxvalue=" " a:minvalue="0.0" <a:domain rdf:resource="&cna_ontology;tcp"/> <a:overriddenproperty rdf:resource="&cna_ontology;tcp_source_port"/> <a:overridingproperty rdf:about="&a;udp_transaction_type" > <a:overriddenproperty rdf:resource="&cna_ontology;transaction_type"/> <a:domain rdf:resource="&cna_ontology;udp"/> <a:overridingproperty rdf:about="&a;udp_udp_destination_port" a:maxvalue=" " a:minvalue="0.0" <a:domain rdf:resource="&cna_ontology;udp"/> <a:overriddenproperty rdf:resource="&cna_ontology;udp_destination_port"/>

17 <a:overridingproperty rdf:about="&a;udp_udp_source_port" a:maxvalue=" " a:minvalue="0.0" <a:domain rdf:resource="&cna_ontology;udp"/> <a:overriddenproperty rdf:resource="&cna_ontology;udp_source_port"/> </rdf:rdf>