The Security Assessment Domain: A Survey of Taxonomies and Ontologies <s> D. Ontologies and Taxonomies <s> Recent work in Artificial Intelligence is exploring the use of formal ontologies as a way of specifying content-specific agreements for the sharing and reuse of knowledge among software entities. We take an engineering perspective on the development of such ontologies. Formal ontologies are viewed as designed artifacts, formulated for specific purposes and evaluated against objective design criteria. We describe the role of ontologies in supporting knowledge sharing activities, and then present a set of criteria to guide the development of ontologies for these purposes. We show how these criteria are applied in case studies from the design of ontologies for engineering mathematics and bibliographic data. Selected design decisions are discussed, and alternative representation choices and evaluated against the design criteria. <s> BIB001 </s> The Security Assessment Domain: A Survey of Taxonomies and Ontologies <s> D. Ontologies and Taxonomies <s> Foundational Ontologies are theoretically well-founded domainindependent systems of categories that have been successfully used to improve the quality of conceptual modeling languages and models. In this paper, we present the latest developments in the UFO ontology. Moreover, we elaborate on the relevance of these foundational ontologies in the development of domain ontologies by showing a case study in the software process domain. <s> BIB002
Ontologies can be used as a vocabulary, a dictionary or a roadmap of the Information Security domain. Furthermore, an ontology can be used to reason (provide inferences) about relationships between entities  . Ontologies are explicit specifications of conceptualizations BIB001 . Ontologies could be used to describe a particular context, providing meaning (semantics) to a vocabulary of words  . An ontology can be classified according to its degree of abstraction or generalization, as follows: (i) Top-level Ontology: it defines generic concepts that are independent of specific domains. More details can be found in BIB002 . (ii) Domain Ontology: it describes a particular domain, specifying concepts, properties and constraints. (iii) Task Ontology: it describes concepts of a task (or an action). (iv) Application Ontology: it describes concepts that consider both the domain context and the task context  . Albeit notations are available for ontology development, such as OWL or OntoUML, that is not the case for taxonomies. For instance, we can find papers presenting taxonomy as an extended vocabulary, a glossary, a list of concepts, concepts presented in a hierarchical way, etc. Hence, Guarino's classification  is used for analysis of both Ontologies (MC-OY) and Taxonomies (MC-TY), to ease the understanding of the analysis.