Weighted Ontology Graph Construction for the Electrotechnical Sector from the Point of View of its Vulnerabilities

The work is devoted to the issue of security of the electrical sector from information threats arising due to the presence of vulnerabilities in its software. For this purpose, an approach (within the framework of Proof of Concept) is proposed for constructing an ontological model of the subject area. Such a model should also reflect the aspect of information security from the perspective of vulnerabilities and at the same time contain information about the importance of terms and their relationships for the subject area. A method has been developed for almost completely automatic construction of a model based on descriptions of vulnerabilities. The method consists of the following 7 steps: downloading vulnerabilities from the NVD repository; converting descriptions into a set of words-tokens; selection of words suitable for constructing an ontological model; normalization of tokens; selection of descriptions related to the electrical sector; calculating the weights of the importance of terms and their connections in the model; building an ontological model. To implement the method, a software prototype was developed, which made it possible to conduct a number of experiments. As a result, graphical representations of ontology kernels were obtained for the Top-10 and Top-20 most significant terms in the field - a weighted ontological graph. The shortcomings and limitations of the investigation and the results obtained, their rationale and ways to eliminate them are indicated.