Home

What is the Threat Actor Context Ontology?

The Threat Actor Context (TAC) ontology is a community-driven project led by the OASIS Threat Actor Context Technical Committee. The TAC ontology is a knowledge representation framework focused on comprehensively representing the context around adversaries. The project comprises a set of concept definitions and their relationships encoded in Web Ontology Language (OWL) that altogether harmonize into what we call the Threat Actor Context ontology.

How the TAC ontology relates to the domain of Cyber Threat Intelligence (CTI)?

The context around adversaries is closely associated with what the cybersecurity community comprehends as Cyber Threat Intelligence (CTI), meaning a process and product that derives a comprehensive understanding of a threat actor's motives, targets, and attack behaviors. For that reason, the TAC ontology subsumes the domain of CTI to represent Threat Actors and the threat intelligence related to them.