Giancarlo Guizzardi

The Unified Foundational Ontology (UFO) was developed over the last two decades by consistently putting together theories from areas such as formal ontology in philosophy, cognitive science, linguistics, and philosophical logics. It comprises a number of micro-theories addressing fundamental conceptual modeling notions, including entity types and relationship types. The aim of this paper is to summarize the current state of UFO, presenting a formalization of the ontology, along with the analysis of a number of cases to illustrate the application of UFO and facilitate its comparison with other foundational ontologies in this special issue. (The cases originate from the First FOUST Workshop – the Foundational Stance, an international forum dedicated to Foundational Ontology research.)

Formal Ontology is a discipline whose business is to develop formal theories about general aspects of reality such as identity, dependence, parthood, truth-making, causality, etc. A foundational ontology is a specific consistent set of these ontological theories that support activities such as domain analysis, conceptual clarification, and meaning negotiation. A (well-founded) core ontology specifies, under a foundational ontology, the central concepts and relations of a given domain. Foundational and core ontologies can be seen as ontology engineering frameworks to systematically address the laborious task of building large (more specific) domain ontologies. However, both in research and industry, it is common that ontologies as computational artifacts are built without the aid of any framework of this kind, often yielding modeling mistakes and representation gaps. In this paper, we analyze a case in the domain of cybersecurity, namely, the case of D3FEND — an OWL knowledge graph of cybersecurity countermeasure techniques proposed by the MITRE Corporation. Based on the Reference Ontology for Security Engineering (ROSE), a core ontology of the security domain founded in the Unified Founda-tional Ontology (UFO), our investigation reveals a number of semantic issues and opportunities for improvement in D3FEND, including missing concepts, semantic overload of terms, and lacking constraints that cause an under-specification of the model. As a result of our ontological analysis, we propose several suggestions for the appropriate redesign of D3FEND to overcome those issues.

Enterprise Risk Management involves the process of identification, evaluation, treatment, and communication regarding risks throughout the enterprise. To support the tasks associated with this process, several frameworks and modeling languages have been proposed, such as the Risk and Security Overlay (RSO) of ArchiMate. An ontological investigation of this artifact would reveal its adequacy, capabilities, and limitations w.r.t. the domain of risk and security. Based on that, a language redesign can be proposed as a refinement. Such analysis and redesign have been executed for the risk elements of the RSO grounded in the Common Ontology of Value and Risk. The next step along this line of research is to address the following research problems: What would be the outcome of an ontological analysis of security-related elements of the RSO? That is, can we identify other semantic deficiencies in the RSO through an ontological analysis? Once such an analysis is provided, can we redesign the security elements of the RSO accordingly, in order to produce an improved artifact? Here, with the aid of the Reference Ontology for Security Engineering (ROSE) and the ontological theory of prevention behind it, we address the remaining gap by proceeding with an ontological analysis of the security-related constructs of the RSO. The outcome of this assessment is an ontology-based redesign of the ArchiMate language regarding security modeling. In a nutshell, we report the following contributions: (1) an ontological analysis of the RSO that identifies six limitations concerning security modeling; (2) because of the key role of the notion of prevention in security modeling, the introduction of the ontological theory of prevention in ArchiMate; (3) a well-founded redesign of security elements of ArchiMate; and (4) ontology-based security modeling patterns that are logical consequences of our proposal of redesign due to its underlying ontology of security. As a form of evaluation, we show that our proposal can describe risk treatment options, according to ISO 31000. Finally, besides presenting multiple examples, we proceed with a real-world illustrative application taken from the cybersecurity domain.

Trust is an attitude that an agent (the trustor) has toward an entity (the trustee), such that the trustor counts upon the trustee to act in a way that is benefi- cial w.r.t. to the trustor’s goals. The notion of trust is relevantly discussed both in in- formation science and philosophy. Unfortunately, we still lack a satisfying account for this concept. The goal of this article is to contribute to filling this gap. First, we take issue with some central tenets shared by the main philosophical accounts, such as that there is just one relation of trust, that this relation has three argument places, and that trust is reliance plus some extra factor. Second, we provide a novel account of trust, also discussing different levels of trust. According to the account we put forth here, the logical form of trust sentences is expressed by a four-place relation. Further, we distinguish and characterize four kinds of trust relations and their connections. We also argue that trust and reliance are different phenomena. Third, on the basis of the proposed account, we extend the Reference Ontology of Trust (ROT). We call the new version of ROT that includes this extension ”ROT 3.0”. Finally, we discuss the implications of the new ontological definitions in the applications we have done of the concept of trust in other works, also pointing out future applications made possible by these novel accounts of trust.

Risk propagation encompasses a plethora of techniques for analyzing how risk “spreads” in a given system. Albeit commonly used in technical literature, the very notion of risk propagation turns out to be a conceptually imprecise and overloaded one. This might also explain the multitude of modeling solutions that have been proposed in the lit- erature. Having a clear understanding of what exactly risk is, how it be quantified, and in what sense it can be propagated is fundamental for devising high-quality risk assessment and decision-making solutions. In this paper, we exploit a previous well-established work about the nature of risk and related notions with the goal of providing a proper interpre- tation of the different notions of risk propagation, as well as revealing and harmonizing the alternative semantics for the links used in common risk propagation graphs. Finally, we discuss how these results can be leveraged in practice to model risk propagation scenarios.

In Risk Management, security issues arise from complex relations among objects and agents, their capabilities and vulnerabilities, the events they are involved in, and the value and risk they ensue to the stakeholders at hand. Further, there are patterns involving these relations that crosscut many domains, ranging from information security to public safety. Understanding and forming a shared conceptualization and vocabulary about these notions and their relations is fundamental for modeling the corresponding scenarios, so that proper security countermeasures can be devised. Ontologies are instruments developed to address these conceptual clarification and terminological systematization issues. Over the years, several ontologies have been proposed in Risk Management and Security Engineering. However, as shown in recent literature, they fall short in many respects, including generality and expressivity - the latter impacting on their interoperability with related models. We propose a Reference Ontology for Security Engineering (ROSE) from a Risk Treatment perspective. Our proposal leverages on two existing Reference Ontologies: the Common Ontology of Value and Risk and a Reference Ontology of Prevention, both of which are grounded on the Unified Foundational Ontology (UFO). ROSE is employed for modeling and analysing some cases, in particular providing clarification to the semantically overloaded notion of Security Mechanism.

In this very issue, Augusto (2022) formulates two requirements upon which to evaluate the adequacy of a foundational ontology. Specifically, the ontological categories: (i) should be understood as the most general kinds of things and (ii) are organized in a non-overlapping finite hierarchy. On the basis of such constraints, he claims that most existing foundational ontologies engineered in the context of Applied Ontology, including the UFO-B ontology, are inadequate. In this article, first we show that his objection against UFO-B can be dissipated by pointing to a trivial terminological confusion. We then argue that his two constraints are not plausible. Then, we show that the disagreement between our point of view and Augusto’s framework is not restricted to those two constraints but extends over the notion of conceptualization of reality.

We present in this paper a novel ontological theory of events whose central tenet is the Aristotelian distinction between the object that changes and the actual subject of change, which is what we call an individual quality. While in the Kimian tradition events are individuated by a triple ⟨ o, P, t ⟩, where o is an object, P a property, and t an interval of time, for us the simplest events are qualitative changes, individuated by a triple ⟨ o, q, t ⟩, where q is an individual quality inhering in o or in one of its parts. Detaching the individuation of events from the property they exemplify results in a fine-grained theory that keeps metaphysics and semantics clearly separate, and lies between the multiplicative and the unitarian approaches. We discuss then the way language refers to events, observing that, in most cases, event descriptions refer to complex, cognitively relevant clusters of co-occurring qualitative changes, which exhibit a synchronic structure depending on the way they are described. Contra Bennett, who famously argued that the semantics of event names ultimately depends on “local context and unprincipled intuitions”, we show how the lexicon provides systematic principles for individuating such clusters and classifying them into kinds. Finally, we address some open challenges in the semantics of locative and manner modifiers.

Types are fundamental for conceptual modeling and knowledge representation, being an essential construct in all major modeling languages in these fields. Despite that, from an ontological and cognitive point of view, there has been a lack of theoretical support for precisely defining a consensual view on types. As a consequence, there has been a lack of precise methodological support for users when choosing the best way to model general terms representing types that appear in a domain, and for building sound taxonomic structures involving them. For over a decade now, a community of researchers has contributed to the development of the Unified Foundational Ontology (UFO) - aimed at providing foundations for all major conceptual modeling constructs. At the core of this enterprise, there has been a theory of types specially designed to address these issues. This theory is ontologically well- founded, psychologically informed, and formally characterized. These results have led to the development of a Conceptual Modelling language dubbed OntoUML, reflecting the ontological micro-theories comprising UFO. Over the years, UFO and OntoUML have been successfully employed on conceptual model design in a variety of domains including academic, industrial, and governmental settings. These experiences exposed improvement opportunities for both the OntoUML language and its underlying theory, UFO. In this paper, we revise the theory of types in UFO in response to empirical evidence. The new version of this theory shows that many of OntoUML’s meta-types (e.g. kind, role, phase, mixin) should be considered not as restricted to substantial types but instead should be applied to model endurant types in general, including relator types, quality types, and mode types. We also contribute with a formal characterization of this fragment of the theory, which is then used to advance a new metamodel for OntoUML (termed OntoUML 2). To demonstrate that the benefits of this approach are extended beyond OntoUML, the proposed formal theory is then employed to support the definition of UFO-based lightweight Semantic Web ontologies with ontological constraint checking in OWL. Additionally, we report on empirical evidence from the literature, mainly from cognitive psychology but also from linguistics, supporting some of the key claims made by this theory. Finally, we propose a computational support for this updated metamodel.

Reification is a standard technique in conceptual modeling, which consists of including in the domain of discourse entities that may otherwise be hidden or implicit. However, deciding what should be rei- fied is not always easy. Recent work on formal ontology offers us a simple answer: put in the domain of discourse those entities that are responsible for the (alleged) truth of our propositions. These are called truthmakers. Re-visiting previous work, we propose in this paper a systematic analysis of truthmaking patterns for properties and relations based on the ontolog- ical nature of their truthmakers. Truthmaking patterns will be presented as generalization of reification patterns, accounting for the fact that, in some cases, we do not reify a property or a relationship directly, but we rather reify its truthmakers.

In recent years, the design and production of information systems have seen significant growth. However, these information artefacts often exhibit characteristics that compromise their reliability. This issue appears to stem from the neglect or underestimation of certain crucial aspects in the application of Information Systems Design (ISD). For example, it is frequently difficult to prove when one of these products does not work properly or works incorrectly (falsifiability), their usage is often left to subjective experience and somewhat arbitrary choices (anecdotes), and their functions are often obscure for users as well as designers (explainability). In this paper, we propose an approach that can be used to support the analysis and re-(design) of information systems grounded on a well-known theory of information, namely, teleosemantics. This approach emphasizes the importance of grounding the design and validation process on dependencies between four core components: the producer (or designer), the produced (or used) information system, the consumer (or user), and the design (or use) purpose. We analyze the ambiguities and problems of considering these components separately. We then present some possible ways in which they can be combined through the teleological approach. Also, we debate guidelines to prevent ISD from failing to address critical issues. Finally, we discuss perspectives on applications over real existing information technologies and some implications for explainable AI and ISD.

Informally speaking, a truthmaker is something in the world in virtue of which the sentences of a language can be made true. This fundamental philosophical notion plays a central role in applied ontology. In particular, a recent nonorthodox formulation of this notion proposed by the philosopher Josh Parsons, which we labelled weak truthamking, has been shown to be extremely useful in addressing a number of classical problems in the area of Conceptual Modeling. In this paper, after revisiting the classical notion of truthmaking, we conduct an in depth analysis of Parsons’ account of weak truthmaking. By doing that, we expose some difficulties in his original formulation. As the main contribution of this paper, we propose solutions to address these issues which are then integrated in a new precise interpretation of truthmaking that is harmonizable with

Preference relations are intensively studied in Economics, but they are also approached in AI, Knowledge Representation, and Conceptual Modelling, as they provide a key concept in a variety of domains of application. In this paper, we propose an ontological foundation of preference relations to formalise their essential aspects across domains. Firstly, we shall discuss what is the ontological status of the relata of a preference relation. Secondly, we investigate the place of preference relations within a rich taxonomy of relations (e.g. we ask whether they are internal or external, essential or contingent, descriptive or nondescriptive relations). Finally, we provide an ontological modelling of preference relation as a module of a foundational (or upper) ontology (viz. OntoUML). The aim of this paper is to provide a sharable foundational theory of preference relation that foster interoperability across the heterogeneous domains of application of preference relations.

It is widely recognized that accurately identifying and classifying competitors is a challenge for many companies and entrepreneurs. Nonetheless, it is a paramount activity which provide valuable insights that affect a wide range of strategic decisions. One of the main challenges in competitor identification lies in the complex nature of the competitive relationships that arise in business envi- ronments. These have been extensively investigate over the years, which lead to a plethora of competition theories and frameworks. Still, the concept of competition remains conceptually complex, as none of these approaches properly formalized their assumptions. In this paper, we address this issue by means of an ontological analysis on the notion of competition in general, and of business competition, in particular, leveraging theories from various fields, including Marketing, Strategic Management, Ecology, Psychology and Cognitive Sciences. Our analysis, the first of its kind in the literature, is grounded on the Unified Foundational Ontology (UFO) and allows us to formally characterize why competition arises, as well as to distinguish between three types of business competitive relationships, namely market-level, firm-level and potential competition.

We propose a novel ontological analysis of relations and relationships based on a re-visitation of a classic problem in the practice of knowledge repre- sentation and conceptual modeling, namely relationship reification. Our idea is that a relation holds in virtue of a relationship's existence. Relationships are therefore truthmakers of relations. In this paper we present a general theory or reification and truthmaking, and discuss the interplay between events and rela- tionships, suggesting that relationships are the focus of events, which emerge from the context (the scene) they occur in.

In a number of papers, Kit Fine introduced a theory of embodiment which distinguishes between rigid and variable embodiments, and has been successfully applied to clarify the ontological nature of entities whose parts may or may not vary in time. In particular, he has applied this theory to describe a process such as the erosion of a cliff, which would be a variable embodiment whose manifestations are the different states of erosion of the cliff. We find this theory very powerful, and especially appropriate to capture the intuition that the same process may go on at different times. However, its formal principles have been subject to some criticisms, mainly concerning the mereological structure of a variable embodiment. Moreover, since the notion of variable embodiment is very general, simply saying that processes are variable embodiments is not enough to understand their ontological nature. To address these concerns, in this paper we proceed in two phases: first, we propose a revised version of Fine’s original theory adapted to the case of processes, which adopts a classical mereology instead of Fine’s hylomorphic mereology, and a temporalized constitution relation in place of Fine’s function of variable embodiment; second, we go deeper into the ontological nature of processes by revisiting the notions of homogeneity, intentionality, and telicity discussed in the literature, and propose an account based on ontological principles and not on semantic properties of predicates. This allows us to organize processes into a novel taxonomy based exclusively on their unity and individuation principles.

The Unified Foundational Ontology (UFO) was developed over the last two decades by consistently putting together theories from areas such as formal ontology in philosophy, cognitive science, linguistics, and philosophical logics. It comprises a number of micro-theories addressing fundamental conceptual modeling notions, including entity types and relationship types. The aim of this paper is to summarize the current state of UFO, presenting a formalization of the ontology, along with the analysis of a number of cases to illustrate the application of UFO and facilitate its comparison with other foundational ontologies in this special issue. (The cases originate from the First FOUST Workshop – the Foundational Stance, an international forum dedicated to Foundational Ontology research.)

Organisations are increasingly transforming themselves to remain profitable and obtain sustainable competitive advantages. Business processes are as important as technology in promoting organisational transformation. Organisational transformation ultimately entails combining existing business components, whether or not with the same use and design, with new ones to generate novel products and services. For example, one particular type of organisation transformation is digital transformation. This notion, which covers even the subjective aspects of organisational transformation, is currently under intensive discussion and suffers from the semantics terms fluctuation related to the notion of ‘organisational transformation’. We argue that this topic could strongly benefit from an ontological analysis and conceptual clarification of these notions. This paper contributes with an attempt in this direction by proposing a Core Ontology of Organisational Transformation (COOT). This ontology comprises concepts and relations central to creating a reference model representing the organisational transformation paradigm. COOT was applied in a real-world case study on a car rental company.

Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. Archi- Mate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related con- structs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security mod- eling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.

Prevention is a pervasive phenomenon. It is about blocking an effect before it happens or stopping it as it unfolds: vaccines prevent (the unfolding of) diseases; seat belts prevent events causing serious injuries; circuit breaks prevent the manifestation of overcurrents. Many disciplines in the information sciences deal with modeling and reasoning about prevention. Examples include risk and security management as well as medical and legal informatics. Having a proper conceptualization of this phenomenon is crucial for devising proper modeling mechanisms and tools to support these disciplines. Forming such a conceptualization is a matter of Formal Ontology. In fact, prevention and related notions have become a topic of interest in this area. In this paper, with the support of Unified Foundational Ontology (UFO), we conduct an ontological analysis of this and other related notions, namely, the notions of countermeasures and countermeasure mechanisms, including the notion of antidotes. As a result of this conceptual clarification process, we propose an ontology-based reusable module extending UFO and capturing the relations between these elements. Finally, we employ this module to address a few cases in risk management.

Types are a crucial concept in conceptual modelling, logic, and knowledge representation as they are an ubiquitous device to un- derstand and formalise the classification of objects. We propose a logical treatment of types based on a cognitively inspired modelling that ac- counts for the amount of information that is actually available to a cer- tain agent in the task of classification. We develop a predicative modal logic whose semantics is based on conceptual spaces that model the ac- tual information that a cognitive agent has about objects, types, and the classification of an object under a certain type. In particular, we ac- count for possible failures in the classification, for the lack of sufficient information, and for some aspects related to vagueness.

In recent years, there has been an increasing interest in the development of well-founded conceptual models for Service Management, Accounting Information Systems and Financial Reporting. Economic ex- changes are a central notion in these areas and they occupy a prominent position in frameworks such as the Resource-Event Action (REA) ISO Standard, service core ontologies (e.g., UFO-S) as well as financial stan- dards (e.g. OMG’s Financial Industry Business Ontology - FIBO). We present a core ontology for economic exchanges inspired by a recent view on this phenomenon. According to this view, economic exchanges are based on an agreement on the actions that the agents are committed to perform. This view enables a unified treatment of economic exchanges, regardless the object of the transaction. We ground our core ontology on the Unified Foundational Ontology (UFO), discussing its formal and conceptual aspects, instantiating it as a reusable OntoUML model, and confronting it with the REA standard and the UFO-S service ontology.

In recent years, there has been an increasing interest in thedevelopment of ontologically well-founded conceptual models for Information Systems in areas such as Service Management, Accounting Information Systems and Financial Reporting. Economic exchanges are central phenomena in these areas. For this reason, they occupy a prominent position in modelling frameworks such as the REA (Resource-EventAction) ISO Standard as well as the FIBO (Financial Industry BusinessOntology). In this paper, we begin a well-founded ontological analysisof economic exchanges inspired by a recent ontological view on the nature of economic transactions. According to this view, what counts asan economic transaction is based on an agreement on the actions thatthe agents are committed to perform. The agreement is in turn based on convergent preferences about the course of action to bring about. This view enables a unified treatment of economic exchanges, regardless the object of the transaction, and complies with the view that all economictransactions are about services. In this paper, we start developing our analysis in the framework of the Unified Foundational Ontology (UFO).