d3fend / d3fend-ontology

This repository holds the necessary content to produce the D3FEND ontology distribution.
https://d3fend.mitre.org
MIT License
55 stars 26 forks source link

Expanding definition for d3f:SourceCode #261

Closed aamedina closed 1 month ago

aamedina commented 3 months ago

I am just proposing an expanded definition for d3f:SourceCode...

:SourceCode a owl:Class,
        owl:NamedIndividual,
        :ReferenceType ;
    rdfs:label "Source Code" ;
    skos:altLabel "Code", "Source" ;
    :definition "Source code is written using a programming language and usually stored as plain text. This source is often transformed by a compiler, assembler, or interpreter into machine code to be executed by user programs. Source code is commonly designed by computer programmers but increasingly may be generated using automation including generative AI and refactoring software. Source code is vulnerable to supply chain attacks, where an adversary modifies the code to compromise the integrity and security of the software." ;
    rdfs:comment "With regard to software licensing as defined by the Free Software Foundation, the source code of a work means the preferred form of the work for making modifications to it." ;
    rdfs:seeAlso <http://dbpedia.org/resource/Source_code> ;
    rdfs:subClassOf :InformationContentEntity,
            [ a owl:Restriction ;
              owl:onProperty :may-be-modified-by ;
              owl:someValuesFrom :Agent ] .
netfl0 commented 3 months ago

We probably want to put that restriction on ICE.

Please send a pull.

aamedina commented 3 months ago

Does this restriction look okay for the PR? (adding :analyzes :SourceCode)

:SourceCodeAnalyzerTool a owl:Class ;
    rdfs:label "Source Code Analyzer Tool" ;
    rdfs:subClassOf :StaticAnalysisTool,
        [ a owl:Restriction ;
            owl:onProperty :analyzes ;
            owl:someValuesFrom :SourceCode ] ;
    :definition "A source code analyzer tool is a static analysis tool that operates specifically on source code, but not object code." ;
    rdfs:seeAlso <http://dbpedia.org/resource/Static_program_analysis> .
aamedina commented 3 months ago

Should this be closed? I think it wasn't auto-closed because I didn't put "fixes" in the PR description.