Ontology-Driven Modeling and Semantic Integration of Attack, Protection, and Risk Domains in Electric Vehicle Charging Systems

Electric Vehicle Charging Systems (EVCSs) have become a critical component of the global transition toward sustainable and intelligent transportation. However, their tight integration with heterogeneous cyber–physical, vehicular, and cloud-based infrastructures exposes them to an expanding attack surface, including data poisoning, malware injection, denial-of-service, and man-in-the-middle (MITM) attacks. Existing security solutions largely rely on isolated detection mechanisms and lack a unified semantic representation of EVCS assets, attack propagation paths, and mitigation dependencies, limiting their effectiveness in complex and evolving threat scenarios. To address these challenges, this paper proposes EVCS-SecOnt, an ontology-driven cybersecurity framework for modeling, reasoning, and mitigating security threats in EVCS infrastructures. The proposed ontology formalizes relationships across four core modules, namely Attack Surface, Attack Classification, Protection Mechanisms, and Risk and Mitigation, enabling holistic threat representation and TARA-based risk assessment. EVCS-SecOnt incorporates standard semantic namespaces (em:, seas:, uiote:, sch:, and time:) to ensure interoperability and is instantiated using the CICEVSE2024 dataset to support observation-level security reasoning. A unified SPARQL-based analytical workflow is employed to perform global ontology validation, attack–risk–severity correlation, mitigation prioritization, and observation-level inference using statistical feature vectors. Experimental results demonstrate that the ontology captures multiple attack classes, risk levels, severity categories, and mitigation strategies, enabling automated identification of critical attack scenarios and context-aware defense recommendations. The validation demonstrates logical consistency, semantic traceability, and query-based coverage of the ontology across attack classes, risk levels, severity categories, and mitigation strategies. EVCS-SecOnt enhances the interpretability, reusability, and explainability of EVCS cybersecurity management by bridging operational data with semantic intelligence. The proposed framework supports adaptive protection, risk-aware decision-making, and ontology-driven security analytics, providing a semantic foundation for next-generation e-mobility and smart charging infrastructures.