A Systematic Literature Review on Cybersecurity Ontology

Nowadays, organisations in various industries are required to have sustainable planning and implementation of cybersecurity frameworks, where communication, analysis, and responses are crucial for various stakeholders, including cybersecurity experts, supply chain partners, and customers. The cybersecurity domain is a complex area with a very involved terminology and encompasses numerous security mechanisms to provide security services, which in turn thwart attacks and protect data and other resources. Unfortunately, there are significant inconsistencies and ambiguities in the use of cybersecurity terminology across the sector, and this hinders communication among cybersecurity professionals. In this paper, we review the most significant existing cybersecurity ontology studies with the help of a refined search strategy, data management, and continuous evaluation. This Systematic Literature Review identifies knowledge gaps and a need for a new cybersecurity ontology focusing on mapping standard terms and identifying semantic equivalences to leverage current ontologies and support practical applications.