and management frameworks such as OCTAVE [13] CORAS [14] security management systems such as policy-based security management [15] Ontology-based and policy based management has been merged in one approach [16] and model-based security management [17] Most of these