CIM–ThreMA Cross-Domain Ontology Simulator
Public implementation of the 2025 RWTH Aachen M.Sc. thesis: a cross-domain ontology linking grid topology (CIM/CGMES) with threat modelling (ThreMA), validated on an IEEE 9-bus cyber testbed.
Problem
Grid engineering models (CIM) and OT threat models (ThreMA) have no shared semantics, so security analysis cannot follow topology changes automatically.
Approach
Five formal semantic mappings between the two ontologies; four documented attack scenarios on an IEEE 9-bus cyber-physical testbed; a Q-learning security agent; a cross-domain signal-to-noise metric to score mapping quality.
Outcome & proof
A browsable simulator anyone can open and run. The full mapping catalogue and scenario definitions ship in the deployment.