CVE to OWL Mapping v1.0
Source
data/schemas/CVE/cve_api_json_2.0.schema
Target Ontology
standards/cve/cve-ontology-v1.0.owl- Core classes:
kgcs:Vulnerability, kgcs:Reference, kgcs:PlatformConfiguration
Entity Mapping
| Source Record |
Target Class |
Primary ID |
vulnerabilities[].cve |
kgcs:Vulnerability |
cve:cveId |
cve.references[] |
kgcs:Reference |
implementation-defined stable key (e.g., URL hash) |
Field Mapping: Vulnerability
| Source Field |
Ontology Property |
id |
cve:cveId |
published |
cve:published |
lastModified |
cve:lastModified |
sourceIdentifier |
cve:source |
Relationship Mapping
| Source Structure |
Ontology Edge |
configurations.nodes[].cpeMatch[] -> matchCriteriaId join to PlatformConfiguration |
cve:affects (Vulnerability -> PlatformConfiguration) |
references[] projection to reference nodes |
cve:references (Vulnerability -> Reference) |
cve:affects is compatibility alias aligned to graph AFFECTS; semantic inverse of core kgcs:affected_by.- Preserve CVE configuration boolean logic (
operator, negate) in ETL decisioning; do not collapse logic into ontology terms.
- Keep provenance metadata for every emitted
cve:affects edge (CVE ID + match criteria ID).