DISO Network - VoID / Dublin Core description
type: Ontology
imports: ontology
description: A VoID and Dublin Core Terms description of DISO - the network of defence, intelligence and security ontologies - its subdomain clusters and its member ontologies.
version info: 1.0.0
issued: 2026-05-07

DISO
type: NamedIndividual
type: OntologyNetwork
title: DISO: Defence, Intelligence and Security Ontologies
description: DISO is a curated collection of publicly available OWL ontologies covering the domains of defence, intelligence and security, organised into subdomain clusters. It was assembled to support a defence, intelligence and security track for the Ontology Alignment Evaluation Initiative (OAEI).
abstract: The use of ontologies and knowledge graphs is becoming increasingly widespread in the defence and national security domain. Numerous ontologies have been developed through initiatives led by academia, industry, and government. Achieving interoperability across diverse defence and national security ontologies remains a major challenge due to the domain's breadth and specialisation. In this work, we analyse and document over 60 publicly available ontologies and introduce a new track for the Ontology Alignment Evaluation Initiative (OAEI). This track comprises eight matching tasks, consensus alignments and a subset of manually-curated mappings. The consensus alignments are derived by aggregating the outputs of several state-of-the-art ontology alignment systems.
creator: https://orcid.org/0009-0009-0260-0492
creator: 0000-0001-6724-899X
creator: https://orcid.org/0009-0008-2736-6789
creator: https://orcid.org/0000-0002-1847-9393
creator: https://orcid.org/0000-0002-9083-4599
publisher: City St George's, University of London
issued: 2026-05-07
license: MIT
spdx license expression: MIT
version info: 1.0.0
sparql endpoint: sparql
subset: Agentic
subset: Ambient Intelligence
subset: Context Awareness
subset: Cyber Security
subset: Digital Twins
subset: Information Exchange
subset: Information Security
subset: Mid-level Ontologies
subset: Risk Management
subset: Robotics
subset: Situation Awareness
subset: Smart Environments
subset: Upper-level Ontologies

Agentic
type: NamedIndividual
type: Cluster
description: Ontologies relating to agentic AI and (semantic) services.
subset: Semantic Markup for Web Services

Ambient Intelligence
type: NamedIndividual
type: Cluster
description: Environments with electronic devices that are aware of and adapt to human presence, enhancing interaction through context-aware, interconnected systems.
subset: Smart Building Ontology for Ambient Intelligence

Context Awareness
type: NamedIndividual
type: Cluster
description: A special case of situation awareness focused on individuals and their immediate context, supporting pervasive computing where services adapt to user context.
subset: Context-Driven Adaptation of Mobile Services
subset: mIO! Ontology Network (context for mobile environments)
subset: Standard Ontology for Ubiquitous and Pervasive Applications

Cyber Security
type: NamedIndividual
type: Cluster
description: Information security strictly within the digital domain: securing assets against digital threats. The largest cluster in DISO.
subset: MITRE ATT&CK
subset: Common Attack Pattern Enumerations and Classifications
subset: Common Platform Enumeration
subset: Common Vulnerabilities and Exposures
subset: Common Vulnerability Scoring System
subset: Common Weakness Enumeration
subset: Detection, Denial & Disruption Framework Empowering Network Defense
subset: Industrial Control Systems Advisory ontology
subset: ICS Security Knowledge Graph Ontology
subset: Insider Threat Indicator Ontology
subset: Ops (Operations) Ontology
subset: SNORT Network Intrusion Detection ontologies
subset: Structured Threat Information eXpression (2.1)
subset: Unified Cyber Ontology
subset: Unified Cybersecurity Ontology (Syed et al.)

Digital Twins
type: NamedIndividual
type: Cluster
description: Digital representations of physical-world entities, environments or processes with two-way data flow between the physical and digital.
subset: Smart Applications REFerence ontology

Information Exchange
type: NamedIndividual
type: Cluster
description: Ontologies that standardise data representations to facilitate the exchange and aggregation of data across diverse domains, organisations and systems.
subset: Information Exchange Standard (v5)
subset: Joint Consultation, Command & Control Information Exchange Data Model

Information Security
type: NamedIndividual
type: Cluster
description: Protecting information in all forms, physical and digital, around the CIA triad of confidentiality, integrity and availability.
subset: Corda Security Ontology
subset: Multi-dimensional Information Security Ontology
subset: Security Ontology for Robotic Process Automation
subset: Security Assessment Ontology
subset: Security Ontology

Mid-level Ontologies
type: NamedIndividual
type: Cluster
description: Ontologies that bridge domain-specific ontologies and upper-level ontologies.
subset: Common Core Ontologies

Risk Management
type: NamedIndividual
type: Cluster
description: Ontologies relating to the identification, assessment and management of risk.
subset: IRIS Risk Core Ontology

Robotics
type: NamedIndividual
type: Cluster
description: Ontologies for robotics and for robotic process automation.
subset: Core Ontology for Robotics and Automation
subset: Security Ontology for Robotic Process Automation

Situation Awareness
type: NamedIndividual
type: Cluster
description: The perception, comprehension and prediction of an environment, its elements and their meaning within dynamic task settings.
subset: Situation Awareness Core ontology
subset: Standard Ontology for Ubiquitous and Pervasive Applications
subset: Situation Theory Ontology
subset: Joint Consultation, Command & Control Information Exchange Data Model

Smart Environments
type: NamedIndividual
type: Cluster
description: Ontologies that model environments at different scales (cities, buildings, homes) with smart or intelligent aspects.
subset: Smart Buildings
subset: Smart Cities
subset: Smart Homes

Upper-level Ontologies
type: NamedIndividual
type: Cluster
description: Abstract, general (foundational / top-level) ontologies whose concepts apply across domains to support broad semantic interoperability.
subset: Basic Formal Ontology
subset: Descriptive Ontology for Linguistic and Cognitive Engineering
subset: DOLCE+DnS Ultralite
subset: General Formal Ontology
subset: General Formal Ontology for Biology
subset: gUFO: lightweight Unified Foundational Ontology
subset: Suggested Upper Merged Ontology

Smart Buildings
type: NamedIndividual
type: Cluster
description: Ontologies for smart buildings.
subset: Smart Building Ontology for Ambient Intelligence
subset: Building Topology Ontology
subset: Brick (buildings ontology)
subset: Information Modelling Framework

Smart Cities
type: NamedIndividual
type: Cluster
description: Ontologies for smart cities.
subset: OWL rendering of CityGML 3.0
subset: Smart City Ontology Framework

Smart Homes
type: NamedIndividual
type: Cluster
description: Ontologies for smart homes.
subset: Smart Home Environments Ontology (eCare@Home)
subset: ThinkHome Smart Home Ontology

Semantic Markup for Web Services
type: NamedIndividual
type: MemberOntology
label: OWL-S
description: An OWL ontology for describing Semantic Web services, enabling automated discovery, invocation and composition.
spdx license expression: NOASSERTION
landing page: http://www.daml.org/services/owl-s/
upstream RDF: Service.owl

Context-Driven Adaptation of Mobile Services
type: NamedIndividual
type: MemberOntology
label: CoDAMoS
description: An ontology modelling user, platform, environment and service for context-aware applications in pervasive computing.
spdx license expression: NOASSERTION
landing page: http://lpis.csd.auth.gr/ontologies/ontolist.html
upstream RDF: CoDAMoS.owl

mIO! Ontology Network (context for mobile environments)
type: NamedIndividual
type: MemberOntology
label: mIO!
description: An ontology network representing user context for mobile environments: location, environment, services, devices and social information.
spdx license expression: CC-BY-3.0
license: CC-BY-3.0
data dump: mIOmerged.ttl
landing page: https://oeg.fi.upm.es/index.php/en/ontologies/82-mio-ontologies/index.html

MITRE ATT&CK
type: NamedIndividual
type: MemberOntology
label: ATTACK
description: A knowledge base of adversary tactics and techniques based on real-world observations.
spdx license expression: LicenseRef-MITRE-ATTACK-ToU AND CC-BY-4.0
data dump: attack.ttl
landing page: https://attack.mitre.org/
upstream RDF: ATTACK.ttl
mirror: ATTACK.ttl
mirror: attack.ttl

Common Attack Pattern Enumerations and Classifications
type: NamedIndividual
type: MemberOntology
label: CAPEC
description: A dictionary of known attack patterns used by adversaries to exploit weaknesses.
spdx license expression: LicenseRef-MITRE-CAPEC-ToU AND CC-BY-4.0 AND MIT
data dump: capec.ttl
landing page: https://capec.mitre.org/
upstream RDF: CAPEC.ttl
mirror: CAPEC.ttl
mirror: capec.ttl

Common Platform Enumeration
type: NamedIndividual
type: MemberOntology
label: CPE
description: A structured naming scheme for IT systems, software and packages.
spdx license expression: MIT AND LicenseRef-NIST-CPE-Dictionary-PD
data dump: cpe.ttl
landing page: https://nvd.nist.gov/products/cpe
upstream RDF: CPE.ttl
mirror: CPE.ttl
mirror: cpe.ttl

Common Vulnerabilities and Exposures
type: NamedIndividual
type: MemberOntology
label: CVE
description: A catalogue of publicly disclosed cybersecurity vulnerabilities.
spdx license expression: CC-BY-4.0 AND MIT AND LicenseRef-MITRE-CVE-Terms-of-Use
data dump: cve.ttl
landing page: https://www.cve.org/
upstream RDF: CVE.ttl
mirror: cve.ttl

Common Vulnerability Scoring System
type: NamedIndividual
type: MemberOntology
label: CVSS
description: An open framework for rating the severity of security vulnerabilities.
spdx license expression: (CC-BY-4.0 OR MIT) AND LicenseRef-FIRST-CVSS-ToU
data dump: cvss.ttl
landing page: https://www.first.org/cvss/
upstream RDF: CVSS.ttl
mirror: CVSS.ttl
mirror: cvss.ttl

Common Weakness Enumeration
type: NamedIndividual
type: MemberOntology
label: CWE
description: A community-developed list of common software and hardware weakness types.
spdx license expression: (MIT AND CC-BY-4.0) AND LicenseRef-MITRE-CWE-ToU
data dump: cwe.ttl
landing page: https://cwe.mitre.org/
upstream RDF: CWE.ttl
mirror: cwe.ttl

Detection, Denial & Disruption Framework Empowering Network Defense
type: NamedIndividual
type: MemberOntology
label: D3FEND
description: A knowledge graph of cybersecurity countermeasures (defensive techniques).
spdx license expression: MIT AND LicenseRef-MITRE-D3FEND-ToU
landing page: https://d3fend.mitre.org/
upstream RDF: d3fend.owl

Industrial Control Systems Advisory ontology
type: NamedIndividual
type: MemberOntology
label: ICSA
description: An ontology representing Industrial Control Systems security advisories.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: icsa.ttl
landing page: https://github.com/sepses/ics-sec-kg
upstream RDF: ICSA.ttl
mirror: icsa.ttl

ICS Security Knowledge Graph Ontology
type: NamedIndividual
type: MemberOntology
label: ICS-SEC-KG-ONTO
description: The ontology of the SEPSES Industrial Control Systems security knowledge graph, integrating several cyber-security vocabularies.
spdx license expression: MIT AND CC-BY-4.0
data dump: ics-sec-kg-onto.ttl
landing page: https://github.com/sepses/ics-sec-kg
upstream RDF: integrated.ttl
mirror: ics-sec-kg-onto.ttl

Insider Threat Indicator Ontology
type: NamedIndividual
type: MemberOntology
label: ITIO
description: An ontology of insider-threat indicators.
spdx license expression: LicenseRef-CMU-SEI-Distribution-Statement-A
landing page: https://www.sei.cmu.edu/library/an-insider-threat-indicator-ontology/
upstream RDF: 2016 005 112 465537.owl

Ops (Operations) Ontology
type: NamedIndividual
type: MemberOntology
label: Ops
description: A cyber-security ontology focused on the operations domain.
spdx license expression: GPL-3.0-only AND CC-BY-4.0
data dump: ops-merged.ttl
landing page: https://github.com/CDSRV/ops-ontology

SNORT Network Intrusion Detection ontologies
type: NamedIndividual
type: MemberOntology
label: SNORT
description: Ontologies describing the SNORT intrusion detection and prevention system, its rules and its alerts.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: snortMerged.ttl
landing page: https://www.snort.org/
upstream RDF: snort.ttl

Structured Threat Information eXpression (2.1)
type: NamedIndividual
type: MemberOntology
label: STIX
description: An OWL representation of the OASIS STIX 2.1 cyber-threat-intelligence specification.
spdx license expression: LicenseRef-OASIS-IPR-Policy-Non-Assertion-Mode
landing page: https://github.com/oasis-tcs/tac-ontology
upstream RDF: stix-spec.owl

Unified Cyber Ontology
type: NamedIndividual
type: MemberOntology
label: UCO_1
description: A community ontology providing a consistent foundation for representing information across the cyber-security domain (UCO Project).
spdx license expression: Apache-2.0 AND CC-BY-3.0
data dump: uco1-merge.ttl
landing page: https://unifiedcyberontology.org/

Unified Cybersecurity Ontology (Syed et al.)
type: NamedIndividual
type: MemberOntology
label: UCO_2
description: A semantic ontology extending STIX with cyber-security standards (Syed et al.).
spdx license expression: NOASSERTION
landing page: https://github.com/Ebiquity/Unified-Cybersecurity-Ontology
upstream RDF: uco2.ttl

Smart Applications REFerence ontology
type: NamedIndividual
type: MemberOntology
label: SAREF
description: A suite of reference ontologies for semantic interoperability across IoT domains.
spdx license expression: BSD-3-Clause
license: BSD-3-Clause
data dump: saref.ttl
landing page: https://saref.etsi.org/
upstream RDF: saref.ttl
mirror: saref.ttl

Information Exchange Standard (v5)
type: NamedIndividual
type: MemberOntology
label: IES
description: The UK Government Information Exchange Standard for consistent, interoperable data exchange.
spdx license expression: MIT
license: MIT
data dump: ies-common.ttl
data dump: ies-core.ttl
data dump: ies-top.ttl
landing page: https://github.com/IES-Org
upstream RDF: ies-common.ttl
mirror: ies-common.ttl

Joint Consultation, Command & Control Information Exchange Data Model
type: NamedIndividual
type: MemberOntology
label: JC3IEDM
description: A data model for the exchange of joint command, control and consultation information (military C2).
spdx license expression: CC-BY-NC-3.0
license: CC-BY-NC-3.0
data dump: JC3IEDM.owl
landing page: https://vistology.com/ont/JC3IEDM/JC3IEDM3.0/JC3IEDM.owl

Corda Security Ontology
type: NamedIndividual
type: MemberOntology
label: CordaSecOnt
description: A security ontology classifying assets, threats, vulnerabilities and countermeasures for Corda applications.
spdx license expression: CC-BY-4.0 AND MIT
data dump: CordaSecOnt-v2.owl
landing page: https://github.com/mubashar-iqbal/corda-security-ontology
upstream RDF: CordaSecOnt.owl

Multi-dimensional Information Security Ontology
type: NamedIndividual
type: MemberOntology
label: MDISOnt
description: A multi-dimensional information security ontology that decomposes security into dimensional views.
spdx license expression: NOASSERTION
landing page: https://github.com/inesmeriah/MDISOnt
upstream RDF: MDISOnt.owl
mirror: MDISOnt.owl

Security Ontology for Robotic Process Automation
type: NamedIndividual
type: MemberOntology
label: OntoSecRPA
description: A security ontology for Robotic Process Automation: assets, risks, threats, vulnerabilities and countermeasures.
spdx license expression: NOASSERTION
landing page: https://github.com/oleferovich/-OntoSecRPA
upstream RDF: OntoSecRPA 2.owx

Security Assessment Ontology
type: NamedIndividual
type: MemberOntology
label: SecAOnto
description: An ontology for security assessment, at the intersection of security and software assessment.
spdx license expression: NOASSERTION
landing page: https://github.com/ferruciof/Files/tree/master/SecAOnto
upstream RDF: SecAOnto V4.owl

Security Ontology
type: NamedIndividual
type: MemberOntology
label: SO
description: A security ontology modelling assets, threats, vulnerabilities and countermeasures, with extension ontologies.
spdx license expression: NOASSERTION
landing page: https://www.ida.liu.se/divisions/adit/security/projects/secont/
upstream RDF: Security.owl

Common Core Ontologies
type: NamedIndividual
type: MemberOntology
label: CCO
description: A suite of mid-level ontologies extending BFO with terms common across domains.
spdx license expression: BSD-3-Clause AND CC-BY-4.0
data dump: CommonCoreOntologiesMerged.ttl
landing page: https://github.com/CommonCoreOntology/CommonCoreOntologies
upstream RDF: CommonCoreOntologiesMerged.ttl
mirror: CommonCoreOntologiesMerged.ttl

IRIS Risk Core Ontology
type: NamedIndividual
type: MemberOntology
label: IRIS
description: A core ontology of terms and relationships for risk identification and assessment.
spdx license expression: NOASSERTION
landing page: http://lpis.csd.auth.gr/ontologies/ontolist.html
upstream RDF: iris.owl

Core Ontology for Robotics and Automation
type: NamedIndividual
type: MemberOntology
label: CORA
description: The IEEE 1872-2015 core ontology for robotics and automation.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: cora-merged.ttl
landing page: https://github.com/srfiorini/IEEE1872-owl
upstream RDF: cora.owl
mirror: cora.owl

Situation Awareness Core ontology
type: NamedIndividual
type: MemberOntology
label: SAWCore
description: A domain-independent upper ontology for situation awareness.
spdx license expression: CC-BY-NC-3.0
license: CC-BY-NC-3.0
data dump: SAWCore.owl
landing page: https://vistology.com/ont/SAWCore/
upstream RDF: SAWCore.owl
mirror: SAWCore.owl

Standard Ontology for Ubiquitous and Pervasive Applications
type: NamedIndividual
type: MemberOntology
label: SOUPA
description: A standard ontology for ubiquitous and pervasive applications: agents, time, space, events and policies.
spdx license expression: CC-BY-1.0
license: CC-BY-1.0
data dump: soupa-merged.ttl
landing page: https://cobra.umbc.edu/ontologies.html

Situation Theory Ontology
type: NamedIndividual
type: MemberOntology
label: STO
description: An OWL formalisation of situation theory for situation awareness.
spdx license expression: CC-BY-NC-3.0
license: CC-BY-NC-3.0
data dump: STO.owl
landing page: https://vistology.com/ont/STO/STO.owl
upstream RDF: STO.owl
mirror: STO.owl

Smart Building Ontology for Ambient Intelligence
type: NamedIndividual
type: MemberOntology
label: BOnSAI
description: A smart-building ontology for ambient intelligence, extending OWL-S and CoDAMoS.
spdx license expression: NOASSERTION
landing page: http://lpis.csd.auth.gr/ontologies/ontolist.html
upstream RDF: BOnSAI.owl

Building Topology Ontology
type: NamedIndividual
type: MemberOntology
label: BOT
description: A minimal ontology for describing the core topological concepts of a building.
spdx license expression: CC-BY-1.0
license: CC-BY-1.0
data dump: bot.ttl
landing page: https://github.com/w3c-lbd-cg/bot
upstream RDF: bot.ttl
mirror: bot.ttl

Brick (buildings ontology)
type: NamedIndividual
type: MemberOntology
label: BRICK
description: An open ontology standardising semantic descriptions of building assets and their relationships.
spdx license expression: BSD-3-Clause AND CC-BY-4.0
data dump: Brick+imports.ttl
landing page: https://github.com/BrickSchema/Brick
upstream RDF: Brick+imports.ttl
mirror: Brick+imports.ttl

Information Modelling Framework
type: NamedIndividual
type: MemberOntology
label: IMF
description: An ontology for modelling facility assets across the design, construction and operation of industrial facilities.
spdx license expression: NOASSERTION
landing page: https://github.com/imf-lab/imf-ontology-semweb
upstream RDF: imf-ontology.owl.ttl

OWL rendering of CityGML 3.0
type: NamedIndividual
type: MemberOntology
label: CityOWL
description: An OWL rendering of the CityGML 3.0 model as a network of ontologies.
spdx license expression: CC-BY-4.0 AND LicenseRef-OGC-Document-License
landing page: https://dataset-dl.liris.cnrs.fr/rdf-owl-urban-data-ontologies/Ontologies/Readme.html
upstream RDF: CityOWL.ttl

Smart City Ontology Framework
type: NamedIndividual
type: MemberOntology
label: SMOF
description: A hierarchical ontology framework for integrating urban (smart-city) data across domains.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: SMOF.ttl
landing page: https://figshare.com/articles/dataset/SMOF_IJGIS_/24996683

Smart Home Environments Ontology (eCare@Home)
type: NamedIndividual
type: MemberOntology
label: SmartEnv
description: A smart-home environment ontology network (eCare@Home) covering time, geometry, events, sensing, situation and place.
spdx license expression: NOASSERTION
landing page: http://ecareathome-ontology.mpi.aass.oru.se/
upstream RDF: smartenv.owl

ThinkHome Smart Home Ontology
type: NamedIndividual
type: MemberOntology
label: ThinkHome
description: A smart-home ontology for home control and energy efficiency.
spdx license expression: NOASSERTION
landing page: https://www.auto.tuwien.ac.at/downloads/thinkhome/

Basic Formal Ontology
type: NamedIndividual
type: MemberOntology
label: BFO
description: A small upper-level ontology built around the continuant/occurrent distinction; an ISO/IEC 21838-2 standard.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: bfo-core.owl
landing page: https://github.com/bfo-ontology/BFO-2020
upstream RDF: bfo-core.owl
mirror: bfo-core.owl

Descriptive Ontology for Linguistic and Cognitive Engineering
type: NamedIndividual
type: MemberOntology
label: DOLCE
description: A foundational ontology capturing core cognitive and linguistic categories of common-sense knowledge.
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: DOLCEbasic.owl
landing page: https://github.com/appliedontolab/DOLCE
upstream RDF: DOLCEbasic.owl
mirror: DOLCEbasic.owl

DOLCE+DnS Ultralite
type: NamedIndividual
type: MemberOntology
label: DUL
description: A lightweight simplification of parts of the DOLCE foundational ontology.
spdx license expression: NOASSERTION
landing page: http://www.ontologydesignpatterns.org/ont/dul/DUL.owl
upstream RDF: DUL.owl

General Formal Ontology
type: NamedIndividual
type: MemberOntology
label: GFO
description: A general formal (upper-level) ontology of objects, processes, time, space, properties and relations.
spdx license expression: BSD-3-Clause
license: BSD-3-Clause
data dump: gfo.owl
landing page: https://www.onto-med.de/ontologies/gfo
upstream RDF: gfo.owl
mirror: gfo.owl

General Formal Ontology for Biology
type: NamedIndividual
type: MemberOntology
label: GFO-Bio
description: A biological core ontology grounded in the GFO upper-level ontology.
spdx license expression: BSD-3-Clause
license: BSD-3-Clause
data dump: gfo-bio-merged.ttl
landing page: https://www.onto-med.de/ontologies/gfo-bio

gUFO: lightweight Unified Foundational Ontology
type: NamedIndividual
type: MemberOntology
label: gUFO
description: A lightweight OWL 2 implementation of the Unified Foundational Ontology (UFO).
spdx license expression: CC-BY-4.0
license: CC-BY-4.0
data dump: gufo.ttl
landing page: https://nemo-ufes.github.io/gufo/
upstream RDF: gufo.ttl
mirror: gufo.ttl

Suggested Upper Merged Ontology
type: NamedIndividual
type: MemberOntology
label: SUMO
description: The Suggested Upper Merged Ontology: a large formal upper ontology with linked domain ontologies.
spdx license expression: GPL-3.0-only AND LicenseRef-IEEE-SUMO-License
landing page: https://www.ontologyportal.org/
upstream RDF: SUMO.owl
mirror: SUMO.owl