Abstract Cybersecurity analysis touches on diverse interdisciplinary aspects, both technical and business-oriented, and diverse stakeholders from different backgrounds must be supported with a knowledge capture environment that operationalizes the “secure by design” principles while also ensuring semantic traceability of the design decisions, to enable AI-based analysis. This paper introduces a domain-specific modeling method supported by a process-centric visual language (a BPMN extension) to enable a knowledge graph treatment for designing cyber threats mitigations in tandem with business process engineering activities and associated data flows. The treatment is intended to be leveraged by LLM (large language model) services, therefore experimentation leans towards AI integration. The domain-specific modeling language (DSML) hybridizes BPMN and threat modeling, further subjected to model transformations into RDF graphs. A demonstrator is implemented on the ADOxx metamodeling platform and its interoperability/adapters for integration with triplestores and LLMs—this makes possible both SPARQL and natural language queries over the prescriptive diagrammatic designs, as analysis approaches. The proposed method can be used to describe contextualized cybersecurity threats during the design phase of a system or during IT system auditing. The integration bridge with knowledge graphs and large language models enhances the system analysis capabilities by streamlining heterogeneous knowledge flows comprising diagrammatic representation, RDF graphs and generative AI, towards an emerging flavor of model-driven engineering. The method was developed iteratively according to the Design Science framework, with its development activities specialized for the DSML-focused Agile Modeling Method Engineering framework.

Multi-view conceptual modeling provides means for representing, with diagrammatic means, the knowledge describing a “system under study” whose complexity cannot be captured in a single comprehensible representation. Typical examples are available in the field of enterprise modeling, where models are inherently layered or partitioned, a feature that must be enabled at meta-modeling level by means of abstraction and decomposition. Multi-view modeling must provide means for coping with the complexity of enterprise knowledge representations through consistency preservation techniques across multiple, interrelated views. The paper at hand formulates the conceptual functions fulfilled by multi-view modeling and provides a demonstrative implementation in the context of the Semantic Object Model enterprise modeling method.