oasis-open / tac-ontology

OASIS Threat Actor Context (TAC) TC: Creating an ontology for expressing the rich context around Threat Actors. https://github.com/oasis-open/tac-ontology
BSD 3-Clause "New" or "Revised" License
9 stars 4 forks source link

Change the classification paradigm for Threat Actor Defining Attributes #32

Closed rhohimer closed 1 year ago

rhohimer commented 2 years ago

Switch from a subclassing paradigm to a category paradigm

rhohimer commented 2 years ago

Tim Casey and I discussed creating a short deck of slides using bird classification as an illustrative example. Using the defining attributes of the bird to classify it. If it talks like a duck, walks like a duck, and looks like a duck, it's probably a duck.

rhohimer commented 2 years ago

I've created a branch called: issue-32-tal-defining-attribs In this branch the DefiningAttributes class has been subclassed to the major groups of defining attributes. DefiningAttributes is a "Category" class.

image

The image above shows that there is a library of owl:NamedIndividual instances that can be used to categorize owl:NamedIndividual objects of type tal:ThreatActor.

rhohimer commented 1 year ago

Tim Casey provided all the axioms for categorizing the threat agent types of the TAL library. Ontology updated, and merged into develop.