Case study

CIM–ThreMA Cross-Domain Ontology Simulator

Public implementation of the 2025 RWTH Aachen M.Sc. thesis: a cross-domain ontology linking grid topology (CIM/CGMES) with threat modelling (ThreMA), validated on an IEEE 9-bus cyber testbed.

Problem

Grid engineering models (CIM) and OT threat models (ThreMA) have no shared semantics, so security analysis cannot follow topology changes automatically.

Approach

Five formal semantic mappings between the two ontologies; four documented attack scenarios on an IEEE 9-bus cyber-physical testbed; a Q-learning security agent; a cross-domain signal-to-noise metric to score mapping quality.

Outcome & proof

A browsable simulator anyone can open and run. The full mapping catalogue and scenario definitions ship in the deployment.

PythonPINNsReinforcement LearningCIM/CGMESThreMA