The Influence Operation Ontology (IOO)

2025-03-10

AI Summary

This paper addresses the lack of systematic knowledge modeling for cyberspace influence operations (IO). It introduces the Influence Operations Ontology (IOO), the first domain-specific ontology designed for cognitive-domain warfare. Methodologically, IOO is formalized in OWL 2 DL and integrates STIX/TAXII with the MITRE ATT&CK framework to enable precise, semantically aligned modeling of cross-domain tactics, techniques, entities, and cognitive impact pathways. Its core contributions are threefold: (1) it fills a critical gap in knowledge representation for non-kinetic cyber operations; (2) it provides an open-source, logically consistent, and inference-capable ontology to support threat detection, attribution analysis, and cyber situational awareness; and (3) it has been deployed in multinational defense AI experimental platforms, demonstrating practical utility in intelligence analysis and defensive response.

Technology Category

• Knowledge Representation and Reasoning: Ontologies
• Application Domains: Internet of Things, Sensor Networks & Smart Cities
• Cognitive Modeling & Cognitive Systems: Analogy

Application Category

• Semantics and Knowledge: Scalable techniques for the creation, curation, publication, maintenance, and consumption of large, Web-based, structured, reusable, knowledge graphs and ontologies
• Graph Algorithms and Modeling for the Web: Foundation models and LLMs for Web-related graphs
• Web Mining and Content Analysis: Sentiment analysis and opinion mining

Abstract

Ontologies provide a systematic framework for organizing and leveraging knowledge, enabling smarter and more effective decision-making. In order to advance in the capitalization and augmentation of intelligence related to nowadays cyberoperations, the proposed Influence Operation Ontology (IOO) establishes the main entities and relationships to model offensive tactics and techniques by threat actors against the public audience through the information environment. It aims to stimulate research and development in the field, leading to innovative applications against influence operations, particularly in the fields of intelligence, security, and defense.

Problem

• Systematize knowledge for smarter decision-making in cyberoperations
• Model offensive tactics and techniques in information environments
• Advance research and development against influence operations

Innovation

• Systematic framework for organizing cyberoperation knowledge
• Modeling offensive tactics in information environment
• Stimulating R&D in intelligence, security, defense