https://ontology.adversaryengagement.org/ae/engagement/Honeypot
A controlled environment intended to be probed, compromised or attacked by adversaries or malware.
Instances of engagement:Honeypot can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|---|---|---|
| From class owl:Thing | |||
| engagement:alertContext | owl:ObjectProperty | An alert context describes the association of actions and objects relating to an alert. | uco-core:UcoObject |
By the associated SHACL property shapes, instances of engagement:Honeypot can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
LOCAL RANGE |
GLOBAL RANGE |
|
|---|---|---|---|---|---|---|---|
| engagement:Honeypot | |||||||
| engagement:honeypotInteractionType | owl:DatatypeProperty |
The interaction class intended for a honeypot.
|
1 |
vocabulary:HoneypotInteractionTypeVocab
|
owl:Thing | ||
| engagement:LureObject | |||||||
| engagement:hasAttackSurface | owl:ObjectProperty |
hasAttackSurface is an object property which describes the UcoObjects which compose the attack surface which is expected to interacted with by an adversary.
|
1 |
uco-core:UcoObject
|
uco-core:UcoObject
|
||
| engagement:hasCharacterization | owl:ObjectProperty |
hasCharacterization is an object property which describes the UcoObjects which compose a deception object or adversary engagement concept.
|
1 |
uco-core:UcoObject
|
uco-core:UcoObject
|
||
| engagement:hasPerceptionCharacterization | owl:ObjectProperty |
hasPerceptionCharacterization is an object property which describes the UcoObjects which compose the perception object which an adversary perceives.
|
1 |
uco-core:UcoObject
|
uco-core:UcoObject
|
||
@prefix engagement: <https://ontology.adversaryengagement.org/ae/engagement/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix vocabulary: <https://ontology.adversaryengagement.org/ae/vocabulary/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
engagement:Honeypot a owl:Class,
sh:NodeShape ;
rdfs:label "Honeypot"@en ;
rdfs:comment " A controlled environment intended to be probed, compromised or attacked by adversaries or malware."@en ;
rdfs:subClassOf engagement:HoneyObject ;
sh:property [ sh:datatype vocabulary:HoneypotInteractionTypeVocab ;
sh:message "Value is outside the default vocabulary HoneypotInteractionTypeVocab." ;
sh:path engagement:honeypotInteractionType ;
sh:severity sh:Info ],
[ sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:or ( [ sh:datatype vocabulary:HoneypotInteractionTypeVocab ] [ sh:datatype xsd:string ] ) ;
sh:path engagement:honeypotInteractionType ],
[ sh:message "Value is not member of the vocabulary HoneypotInteractionTypeVocab." ;
sh:or ( [ sh:datatype vocabulary:HoneypotInteractionTypeVocab ;
sh:in ( "High"^^vocabulary:HoneypotTypeVocab "Low"^^vocabulary:HoneypotTypeVocab "Dynamic"^^vocabulary:HoneypotTypeVocab ) ] [ sh:datatype xsd:string ] ) ;
sh:path engagement:honeypotInteractionType ] ;
sh:targetClass engagement:Honeypot .