SecWiki is an research project to build semi-structured security information knowledge-base. It is an academic research project to create an knowledge-base that aggregates information contained in various security baseline definitions. Instead of using document format specifications, wiki format provides possibility to create multiple viewpoints to security controls defined by the specifications.
Current work has been focused to bring NIST SP 800-53 specification into semantic wiki. This is done using XML representation of the specification provided by the NIST and transforming it to semantic structures defined in this wiki. To browse transformed and imported specification, see NIST SP 800-53 release 4 page.
The advantages of semantic wiki are displayed as dynamic view made using queries. See following pages that contain statistics of the specification generated using semantic queries:
- Full list of security controls and control enhancements
- Counts of related controls
- Retired controls and control enhancements
- List controls by baseline
For further details, contact Riku Nykänen (riku.nykanen # gmail.com).