{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,4]],"date-time":"2026-10-04T14:53:34Z","timestamp":1791125614497,"version":"4.1.0"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032407948","type":"print"},{"value":"9783032407955","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T00:00:00Z","timestamp":1791158400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T00:00:00Z","timestamp":1791158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2027]]},"DOI":"10.1007\/978-3-032-40795-5_11","type":"book-chapter","created":{"date-parts":[[2026,10,4]],"date-time":"2026-10-04T14:29:40Z","timestamp":1791124180000},"page":"182-199","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["ROCAP: A Reference Ontology for\u00a0Cybersecurity Attack Planning"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-7474-0382","authenticated-orcid":false,"given":"Antoine","family":"Leblanc","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9551-7621","authenticated-orcid":false,"given":"Zequan","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herv\u00e9","family":"Cholez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7425-2639","authenticated-orcid":false,"given":"Jacques","family":"Robin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2955-9139","authenticated-orcid":false,"given":"S\u00e9bastien","family":"Larinier","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3452-553X","authenticated-orcid":false,"given":"Giancarlo","family":"Guizzardi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2384-3081","authenticated-orcid":false,"given":"\u00cdtalo","family":"Oliveira","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5385-5761","authenticated-orcid":false,"given":"Tiago","family":"Prince Sales","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xavier","family":"Rousseau","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3051-7241","authenticated-orcid":false,"given":"Nourh\u00e8ne","family":"Ben Rabah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3813-4093","authenticated-orcid":false,"given":"B\u00e9n\u00e9dicte","family":"Le Grand","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,10,5]]},"reference":[{"key":"11_CR1","doi-asserted-by":"crossref","unstructured":"Akbar, K.A.: The design and application of a unified ontology for cyber security. In: International Conference on Information Systems Security, pp. 23\u201341 (2023)","DOI":"10.1007\/978-3-031-49099-6_2"},{"key":"11_CR2","doi-asserted-by":"crossref","unstructured":"Akbar, K.A., et\u00a0al.: The design of an ontology for ATT&CK and its application to cybersecurity. In: Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy, pp. 295\u2013297. ACM (2023)","DOI":"10.1145\/3577923.3585051"},{"key":"11_CR3","doi-asserted-by":"crossref","unstructured":"Amaral, G.: Towards a Reference Ontology of Trust, pp. 3\u201321 (2019)","DOI":"10.1007\/978-3-030-33246-4_1"},{"key":"11_CR4","doi-asserted-by":"crossref","unstructured":"Amaral, G.: Trustworthiness requirements: the pix case study (2021)","DOI":"10.1007\/978-3-030-89022-3_21"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Ansarinia, M.: Ontology-based modeling of DDoS attacks for attack plan detection. In: International Symposium on Telecommunications, pp. 993\u2013998 (2012)","DOI":"10.1109\/ISTEL.2012.6483131"},{"key":"11_CR6","unstructured":"Bratman, M.: Intention, Plans, and Practical Reason. Harvard University Press (1987)"},{"key":"11_CR7","unstructured":"Chan, P.: An ontological knowledge base for cyber network attack planning. In: International Conference on Cyber Warfare and Security (2015)"},{"key":"11_CR8","unstructured":"Fonseca, C.M.: Ontology-driven conceptual modeling as a service. In: CEUR Workshop Proceedings, p. 2969 (2021)"},{"issue":"4","key":"11_CR9","doi-asserted-by":"publisher","first-page":"297","DOI":"10.1049\/cmu2.12736","volume":"18","author":"E Gilliard","year":"2024","unstructured":"Gilliard, E., et al.: Knowledge graph reasoning for cyber attack detection. IET Commun. 18(4), 297\u2013308 (2024)","journal-title":"IET Commun."},{"key":"11_CR10","doi-asserted-by":"crossref","unstructured":"Guizzardi, G.: The Problem of Transitivity of Part-Whole Relations in Conceptual Modeling Revisited, pp. 94\u2013109 (2009)","DOI":"10.1007\/978-3-642-02144-2_12"},{"key":"11_CR11","unstructured":"Guizzardi, G.: Grounding software domain ontologies in the unified foundational ontology (UFO): the case of the ODE software process ontology. In: Conferencia Iberoamericana de Software Engineering (2008)"},{"key":"11_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1007\/978-3-642-41924-9_27","volume-title":"Conceptual Modeling","author":"G Guizzardi","year":"2013","unstructured":"Guizzardi, G., Wagner, G., de Almeida Falbo, R., Guizzardi, R.S.S., Almeida, J.P.A.: Towards ontological foundations for the conceptual modeling of events. In: Ng, W., Storey, V.C., Trujillo, J.C. (eds.) ER 2013. LNCS, vol. 8217, pp. 327\u2013341. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-41924-9_27"},{"key":"11_CR13","doi-asserted-by":"crossref","unstructured":"Guizzardi, G.: UFO: unified foundational ontology. Appl. Ontol. (2022)","DOI":"10.3233\/AO-210256"},{"issue":"3","key":"11_CR14","doi-asserted-by":"publisher","first-page":"65","DOI":"10.4018\/IJCWT.2016070106","volume":"6","author":"R van Heerden","year":"2016","unstructured":"van Heerden, R., et al.: Using an ontology for network attack planning. Int. J. Cyber Warfare Terror. 6(3), 65\u201378 (2016)","journal-title":"Int. J. Cyber Warfare Terror."},{"key":"11_CR15","unstructured":"International Organization for Standardization: ISO 31000:2018 \u2013 risk management: Guidelines (2018)"},{"key":"11_CR16","unstructured":"International Organization for Standardization: ISO\/IEC 27005:2022 \u2013 guidance on managing information security risks (2022)"},{"issue":"1\u20132","key":"11_CR17","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1162\/dint_r_00024","volume":"2","author":"A Jacobsen","year":"2020","unstructured":"Jacobsen, A., et al.: Fair principles: interpretations and implementation considerations. Data Intell. 2(1\u20132), 10\u201329 (2020)","journal-title":"Data Intell."},{"key":"11_CR18","unstructured":"Kaloroumakis, P.E., Smith, M.J.: Toward a knowledge graph of cybersecurity countermeasures. The MITRE Corporation, Technical report (2021)"},{"key":"11_CR19","doi-asserted-by":"publisher","unstructured":"Leblanc, A.: Rethinking cybersecurity ontology classification and evaluation: towards a credibility-centered framework. In: Enterprise Design, Operations, and Computing, pp. 284\u2013299. Springer, Heidelberg (2026). https:\/\/doi.org\/10.1007\/978-3-032-15140-7_16","DOI":"10.1007\/978-3-032-15140-7_16"},{"issue":"24","key":"11_CR20","doi-asserted-by":"publisher","first-page":"4128","DOI":"10.3390\/electronics11244128","volume":"11","author":"Y Liu","year":"2022","unstructured":"Liu, Y., Guo, Y.: Towards real-time warning and defense strategy AI planning for cyber security systems aided by security ontology. Electronics 11(24), 4128 (2022)","journal-title":"Electronics"},{"key":"11_CR21","doi-asserted-by":"crossref","unstructured":"Luh, R.: TAON: an ontology-based approach to mitigating targeted attacks. In: Proceedings of the 18th International Conference on Information Integration and Web-Based Applications and Services, pp. 303\u2013312. ACM (2016)","DOI":"10.1145\/3011141.3011157"},{"key":"11_CR22","unstructured":"MITRE Corporation: CAPEC \u2013 Common Attack Pattern Enumeration and Classification. https:\/\/capec.mitre.org\/"},{"key":"11_CR23","unstructured":"MITRE Corporation: Common Vulnerabilities and Exposures (CVE). https:\/\/www.cve.org\/"},{"key":"11_CR24","unstructured":"MITRE Corporation: Common Weakness Enumeration (CWE). https:\/\/cwe.mitre.org\/"},{"key":"11_CR25","unstructured":"National Institute of Standards and Technology: The NIST Cybersecurity Framework (CSF) 2.0. Technical Report. NIST CSWP 29 (2024)"},{"key":"11_CR26","doi-asserted-by":"publisher","unstructured":"Oliveira, \u00cd., et\u00a0al.: An ontology of security from a risk treatment perspective. In: Conceptual Modeling \u2013 ER 2022, pp. 365\u2013379. Springer, Heidelberg (2022). https:\/\/doi.org\/10.1007\/978-3-031-17995-2_26","DOI":"10.1007\/978-3-031-17995-2_26"},{"key":"11_CR27","doi-asserted-by":"crossref","unstructured":"Oliveira, \u00cd., et\u00a0al.: Boosting D3FEND: ontological analysis and recommendations. In: Proceedings of the FOIS 2023, pp. 334\u2013348 (2023)","DOI":"10.3233\/FAIA231138"},{"key":"11_CR28","doi-asserted-by":"crossref","unstructured":"Oliveira, \u00cd., et\u00a0al.: An ontological lens on attack trees: toward adequacy and interoperability. In: Formal Ontology in Information Systems, vol.\u00a0409, pp. 151\u2013165. IOS Press (2025)","DOI":"10.3233\/FAIA250491"},{"key":"11_CR29","doi-asserted-by":"publisher","unstructured":"Oliveira, \u00cd., et\u00a0al.: An ontological model of the phishing attack process. In: Enterprise, Business-Process and Information Systems Modeling. BPMDS 2025, EMMSAD 2025, vol.\u00a0558, pp. 274\u2013289. Springer, Heidelberg (2025). https:\/\/doi.org\/10.1007\/978-3-031-95397-2_17","DOI":"10.1007\/978-3-031-95397-2_17"},{"key":"11_CR30","unstructured":"Ou, X., et\u00a0al.: MulVAL: a logic-based network security analyzer. In: Proceedings of the 14th USENIX Security Symposium, pp. 113\u2013128 (2005)"},{"key":"11_CR31","unstructured":"Pols, P.: The Unified Kill Chain. Fox-IT and HAN University of Applied Sciences, Technical report (2017)"},{"key":"11_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1007\/978-3-030-00847-5_11","volume-title":"Conceptual Modeling","author":"TP Sales","year":"2018","unstructured":"Sales, T.P., Bai\u00e3o, F., Guizzardi, G., Almeida, J.P.A., Guarino, N., Mylopoulos, J.: The common ontology of value and risk. In: Trujillo, J.C., et al. (eds.) ER 2018. LNCS, vol. 11157, pp. 121\u2013135. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00847-5_11"},{"key":"11_CR33","doi-asserted-by":"crossref","unstructured":"Putrevu, V.S.C.: A framework for advanced persistent threat attribution using Zachman ontology. In: Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference (EICC \u201923), pp. 34\u201341. ACM (2023)","DOI":"10.1145\/3590777.3590783"},{"issue":"6","key":"11_CR34","doi-asserted-by":"publisher","first-page":"5695","DOI":"10.1109\/TKDE.2022.3175719","volume":"35","author":"Y Ren","year":"2023","unstructured":"Ren, Y., et al.: CSKG4APT: a cybersecurity knowledge graph for advanced persistent threat organization attribution. IEEE Trans. Knowl. Data Eng. 35(6), 5695\u20135709 (2023)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"issue":"7","key":"11_CR35","doi-asserted-by":"publisher","first-page":"643","DOI":"10.1080\/08839514.2019.1592344","volume":"33","author":"N Scarpato","year":"2019","unstructured":"Scarpato, N., et al.: Reachability matrix ontology: a cybersecurity ontology. Appl. Artif. Intell. 33(7), 643\u2013655 (2019)","journal-title":"Appl. Artif. Intell."},{"key":"11_CR36","unstructured":"Strom, B.E.: MITRE ATT&CK: Design and Philosophy. The MITRE Corporation, Technical report (2020)"},{"key":"11_CR37","doi-asserted-by":"crossref","unstructured":"Sun, L., et\u00a0al.: APTKG: constructing threat intelligence knowledge graph from open-source APT reports based on deep learning. In:2022 5th International Conference on Data Science and Information Technology (DSIT), pp. 01\u201306 (2022)","DOI":"10.1109\/DSIT55514.2022.9943933"},{"key":"11_CR38","unstructured":"The DFIR Report: Fake Zoom Ends in BlackSuit Ransomware (2025). https:\/\/thedfirreport.com\/2025\/03\/31\/fake-zoom-ends-in-blacksuit-ransomware\/"},{"key":"11_CR39","doi-asserted-by":"publisher","first-page":"227756","DOI":"10.1109\/ACCESS.2020.3045514","volume":"8","author":"M Vielberth","year":"2020","unstructured":"Vielberth, M., et al.: Security operations center: a systematic study and open challenges. IEEE Access 8, 227756\u2013227779 (2020)","journal-title":"IEEE Access"},{"key":"11_CR40","doi-asserted-by":"crossref","unstructured":"Wang, F.: Ontology-based APT attack detection and defense countermeasures. In: International Conference on High Performance Big Data and Intelligent Systems (HDIS), pp. 27\u201333 (2022)","DOI":"10.1109\/HDIS56859.2022.9991678"}],"container-title":["Lecture Notes in Computer Science","Conceptual Modeling"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-40795-5_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,4]],"date-time":"2026-10-04T14:29:43Z","timestamp":1791124183000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-40795-5_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10,5]]},"ISBN":["9783032407948","9783032407955"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-40795-5_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10,5]]},"assertion":[{"value":"5 October 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ER","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Conceptual Modeling","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"St. John's","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 October 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 October 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"45","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"er2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/er2026.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}