Cyber Ontology Development

The objective of this work is the development of a mathematical ontology for cyber events, entities and their associations and intentionscyber Situation Awareness (SA)and associated cyber Command and Control (C2). We use the qualifier mathematical to mean that in such an ontology, every Type (Class) has a distinct mathematical interpretation to differentiate from many so-called ontologies today differ little from conventional data models or schemas. More than any other military operations, cyber operations are multi-source and multi-INT. In many cases no single detected event or activity is sufficiently suspicious to trigger counter action; that is, the enemy is assumed to be sophisticated enough to be silent, to stay under the radar. Detection may occur as a result of multiple types of sensor and intelligence data or as the result of associating events and entities, i.e., data fusion. This requires an accumulation of detections and hypotheses for assured detection while minimizing false alarms. Current rule-based and heuristic approaches will not scale or adapt. Consequently we will develop a mathematical cyber ontology that is founded on mathematics that will enable the development of cloud-based cyber distributed data fusion and analytics that are mathematically principled.