Researching Security Ontologies for Information Systems: A Systematic Mapping Study

The increasing integration of systems, such as Systems-of-Systems (SoS), Cyber-Physical Systems (CPS), and Intelligent Systems, driven by the use of APIs, has brought significant efficiency gains, but has also introduced new security vulnerabilities. To ensure secure communication that meets the requirements of confidentiality, integrity, and availability of information, the use of ontologies emerges as a promising strategic solution, capable of unifying heterogeneous data and strengthening governance in complex environments. This article presents a systematic mapping study aimed at identifying, classifying, and analyzing methods, techniques, and tools applied to security ontologies in Information Systems, considering the fundamental dimensions of Processes, People, and Technologies. As a result, a generic taxonomy grounded in OntoUML is proposed, organizing existing approaches and offering an integrated and ontologically consistent view of the research field.