This paper analyzes the proliferation of cybersecurity ontologies, arguing that this surge cannot be explained solely by technical shortcomings related to quality, but also by a credibility deficit - a lack of trust, endorsement, and adoption by users. This conclusion is based on our first contribution, which is a state-of-the-art review and categorization of cybersecurity ontologies using the Framework for Ontologies Classification framework. To address this gap, we propose a revised framework for assessing credibility, introducing indicators such as institutional support, academic recognition, day-to-day practitioner validation, and industrial adoption. Based on these new credibility indicators, we construct a classification scheme designed to guide the selection of ontologies that are relevant to specific security needs. We then apply this framework to a concrete use case: the Franco-Luxembourgish research project ANCILE, which illustrates how a credibility-aware evaluation can reshape ontology selection for operational contexts.
翻译:本文分析了网络安全本体的激增现象,认为这一趋势不能仅归因于与质量相关的技术缺陷,还源于可信度不足——即用户缺乏信任、认可与采纳。这一结论基于我们的第一项贡献:利用本体分类框架(Framework for Ontologies Classification)对网络安全本体进行了前沿综述与分类。为弥补这一不足,我们提出了一个修订后的可信度评估框架,引入了机构支持、学术认可、日常从业者验证及工业应用采纳等指标。基于这些新的可信度指标,我们构建了一个分类方案,旨在指导针对特定安全需求选择相关本体。随后,我们将该框架应用于一个具体案例:法卢研究项目ANCILE,该项目展示了可信度感知评估如何重塑面向操作场景的本体选择过程。