本體論於資訊資產管理之應用

企業電子化之後，現今大多數企業皆導入各項資訊資產以提升組織競爭力，不過無論是軟體或硬體，在內部普遍都存在著管理問題。為使組織內部各個不同的資訊資產之管理更有效率，降低內部人員稽核之難度，讓此領域的專業知識能透過語意網之概念與技術，達到分享與再利用之目的，本研究將會延伸Noy 和McGuinness (2001)所提出知識工程法，結合以SWRL 撰寫稽核規則並導入至推論引擎，建置資訊資產知識庫系統。本研究可分成八大步驟，前六步驟將透過OWL 、RDF 等語意網的技術，結合資訊資產記錄的蒐集與整合，即資訊資產的專業細分及分類，將資訊資產之領域專業知識建構成知識本體；後兩步驟則是結合SWRL 化的稽核規則，並利用Protégé 所建置的資訊資產知識庫，結合Everest 對資訊資產的專業分析和定時蒐集的資訊資產記錄的資料庫，導入推論引擎進行實作，協助稽核人員能隨時掌握了解資訊資產狀況，可及時發現問題並做好妥善處理，以有效率的方式進行資訊資產管控，亦可快速且有效的查詢出所需資訊，進而及時發覺或追查危害組織的資訊資產個體，已達到確保所有的運作皆按既定安全政策執行，同時也能夠確認所有資訊資產皆獲得授權，並經適當處理。除此之外，更可讓此資訊資產之領域專業知識能透過語意網之概念與技術，達到分享與再利用。

關鍵字

本體論；資訊資產；語意網； SWRL

並列摘要

After being computerized, most enterprises import various information assets to enhance competitiveness. No matter software or hardware, there are some problems about management inside enterprises universally. In order to make management of information asset more efficient, debase the difficulty of auditing and make professional knowledge of this domain to reach the goal of share and reuse through the concept and technique of semantic web, the research imports the methodology of knowledge engineering (brought up by Noy and McGuinness) and combines auditing regulations composed by SWRL to build an information-asset knowledgebase system. The methodology of this research can divide into eight steps. The first sixths builds professional knowledge of information asset to ontology according to OWL, RDF and technique of semantic web combined with the analyzing of information asset. The last two not only combines regulations in SWRL and utilizes information-asset knowledgebase system built by Protégé, but also integrates database and imports inference engine to implement. The methodology can assist auditors to know the status of information asset well at any moment. It can also support auditors to discover the problems apropos in efficiency. In addition to detecting harmful individual of information asset, it also can confirm that all information assets are authorized and dealt with appropriately. Besides, it can make professional knowledge of this domain to reach the goal of share and reuse through the concept and technique of semantic web.