A widely debated issue in contemporary metaphysics is whether the modal profile of ordinary objects has to be explained in non-modal terms (that is, Thesis 1). However, how to solve such an issue with respect to occurrences – namely, processes and events – is a question that has been largely neglected in the current metaphysical debate. The general goal of this article is to start filling this gap. As a first result of the article, we make it plausible that, if (...) Thesis 1 holds for objects, then it also holds for processes and events. Then, we develop a metaphysical account of processes derived from Fine’s (1999, 2022) suggestions, according to which a process is a variable embodiment that is manifested by different events at the different times it goes on – namely, Thesis 2. We raised the challenge from the completion of a process that asks the Finean account of processes to explain relevant modal features of processes in non-modal terms. As a second result, we argue that four initially plausible strategies for solving such a challenge fall short of solving it. As a third result, we show that the theory of variable embodiments Fine formulates for objects must differ from the theory of variable embodiments that aims to model processes. We conclude by investigating some revisions to a theory of variable embodiments that aims to model processes. (shrink)

The theory of variable embodiments has been primarily formulated to model ordinary objects as things that change their parts over time. A variable embodiment /f/ is a sui generis whole constructed from a principle f, the principle of a variable embodiment, and it is manifested at different times by different things picked out by such a principle f. This principle is usually clarified as a function that picks out, at any given time the variable embodiment exists, its corresponding manifestation at (...) that time, and it fails to pick out anything at any other time. The first purpose of this article is to examine and refute three natural understandings of such a principle. Specifically, first, we argue against the view that it should be understood extensionally as either a partial function or total function. Next, we provide some motivations to reject the understanding of the principle as a function in intensional terms, where the notion of intension is analyzed in terms of a specific version of a possible world semantics. The second goal of the article is to make it plausible that the principle has an intensional character and, on the basis of the results achieved, to formulate some constraints that an account of such a principle should meet. (shrink)

Monists and pluralists disagree concerning how many ordinary objects there are in a single situation. For instance, pluralists argue that a statue and the clay it is made of have different properties, and thereby are different. The standard monist’s response is to hold that there is just a single object, and that, under the description “being a statue”, this object is, e.g., aesthetically valuable, and that, under the description “being a piece of clay”, it is not aesthetically valuable. However, Fine (...) provided an ontological reading of the expression “an object under a description”: the theory of rigid embodiments. The debate between monists and pluralists reduplicates in the domain of ordinary occurrences, like walks and conferences. Specifically, they disagree whether an occurrence in progress (also called “process”) like John’s walk that is happening at tn is identical to some completed occurrence (also called “event”) like John’s walk that happened between, e.g., t1 and tn. Under the adoption of the pluralist’s position, the article aims to provide a novel theory of ordinary occurrences that develops the ontological reading of “under a description” to account for occurrences in progress and completed occurrences. As a first result, we formulate a theory according to which both occurrences in progress and completed occurrences are rigid embodiments. As a second result, we argue that the suggested theory is explanatorily powerful to the extent it solves two puzzles that we call “the Puzzle from the Completion of a Process” and “the Metaphysical-cum-Semantical Puzzle”. (shrink)

We present in this paper a novel ontological theory of events whose central tenet is the Aristotelian distinction between the object that changes and the actual subject of change, which is what we call an individual quality. While in the Kimian tradition events are individuated by a triple ⟨ o, P, t ⟩, where o is an object, P a property, and t an interval of time, for us the simplest events are qualitative changes, individuated by a triple ⟨ o, (...) q, t ⟩, where q is an individual quality inhering in o or in one of its parts. Detaching the individuation of events from the property they exemplify results in a fine-grained theory that keeps metaphysics and semantics clearly separate, and lies between the multiplicative and the unitarian approaches. We discuss then the way language refers to events, observing that, in most cases, event descriptions refer to complex, cognitively relevant clusters of co-occurring qualitative changes, which exhibit a synchronic structure depending on the way they are described. Contra Bennett, who famously argued that the semantics of event names ultimately depends on “local context and unprincipled intuitions”, we show how the lexicon provides systematic principles for individuating such clusters and classifying them into kinds. Finally, we address some open challenges in the semantics of locative and manner modifiers. (shrink)

Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. Archi- Mate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related con- structs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing (...) modeling elements, and other deficiencies of the security mod- eling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations. (shrink)

Processes are occurrents that were, are, or will be happening. They endure or they perdure, i.e. they are either “fully” present at every time they happen, or they rather have temporal parts. According to Stout (2016), they endure. His argument assumes that processes may change. Then, Stout argues that, if something changes, it endures. As I show, Stout’s Argument misses its target. In particular, it makes use of a notion of change that is either intuitive but illegitimate or technical but (...) question-begging. (shrink)

Enterprise Risk Management involves the process of identification, evaluation, treatment, and communication regarding risks throughout the enterprise. To support the tasks associated with this process, several frameworks and modeling languages have been proposed, such as the Risk and Security Overlay (RSO) of ArchiMate. An ontological investigation of this artifact would reveal its adequacy, capabilities, and limitations w.r.t. the domain of risk and security. Based on that, a language redesign can be proposed as a refinement. Such analysis and redesign have been (...) executed for the risk elements of the RSO grounded in the Common Ontology of Value and Risk. The next step along this line of research is to address the following research problems: What would be the outcome of an ontological analysis of security-related elements of the RSO? That is, can we identify other semantic deficiencies in the RSO through an ontological analysis? Once such an analysis is provided, can we redesign the security elements of the RSO accordingly, in order to produce an improved artifact? Here, with the aid of the Reference Ontology for Security Engineering (ROSE) and the ontological theory of prevention behind it, we address the remaining gap by proceeding with an ontological analysis of the security-related constructs of the RSO. The outcome of this assessment is an ontology-based redesign of the ArchiMate language regarding security modeling. In a nutshell, we report the following contributions: (1) an ontological analysis of the RSO that identifies six limitations concerning security modeling; (2) because of the key role of the notion of prevention in security modeling, the introduction of the ontological theory of prevention in ArchiMate; (3) a well-founded redesign of security elements of ArchiMate; and (4) ontology-based security modeling patterns that are logical consequences of our proposal of redesign due to its underlying ontology of security. As a form of evaluation, we show that our proposal can describe risk treatment options, according to ISO 31000. Finally, besides presenting multiple examples, we proceed with a real-world illustrative application taken from the cybersecurity domain. (shrink)

Risk propagation encompasses a plethora of techniques for analyzing how risk “spreads” in a given system. Albeit commonly used in technical literature, the very notion of risk propagation turns out to be a conceptually imprecise and overloaded one. This might also explain the multitude of modeling solutions that have been proposed in the lit- erature. Having a clear understanding of what exactly risk is, how it be quantified, and in what sense it can be propagated is fundamental for devising high-quality (...) risk assessment and decision-making solutions. In this paper, we exploit a previous well-established work about the nature of risk and related notions with the goal of providing a proper interpre- tation of the different notions of risk propagation, as well as revealing and harmonizing the alternative semantics for the links used in common risk propagation graphs. Finally, we discuss how these results can be leveraged in practice to model risk propagation scenarios. (shrink)

Trust is an attitude that an agent (the trustor) has toward an entity (the trustee), such that the trustor counts upon the trustee to act in a way that is benefi- cial w.r.t. to the trustor’s goals. The notion of trust is relevantly discussed both in in- formation science and philosophy. Unfortunately, we still lack a satisfying account for this concept. The goal of this article is to contribute to filling this gap. First, we take issue with some central tenets (...) shared by the main philosophical accounts, such as that there is just one relation of trust, that this relation has three argument places, and that trust is reliance plus some extra factor. Second, we provide a novel account of trust, also discussing different levels of trust. According to the account we put forth here, the logical form of trust sentences is expressed by a four-place relation. Further, we distinguish and characterize four kinds of trust relations and their connections. We also argue that trust and reliance are different phenomena. Third, on the basis of the proposed account, we extend the Reference Ontology of Trust (ROT). We call the new version of ROT that includes this extension ”ROT 3.0”. Finally, we discuss the implications of the new ontological definitions in the applications we have done of the concept of trust in other works, also pointing out future applications made possible by these novel accounts of trust. (shrink)

In Risk Management, security issues arise from complex relations among objects and agents, their capabilities and vulnerabilities, the events they are involved in, and the value and risk they ensue to the stakeholders at hand. Further, there are patterns involving these relations that crosscut many domains, ranging from information security to public safety. Understanding and forming a shared conceptualization and vocabulary about these notions and their relations is fundamental for modeling the corresponding scenarios, so that proper security countermeasures can be (...) devised. Ontologies are instruments developed to address these conceptual clarification and terminological systematization issues. Over the years, several ontologies have been proposed in Risk Management and Security Engineering. However, as shown in recent literature, they fall short in many respects, including generality and expressivity - the latter impacting on their interoperability with related models. We propose a Reference Ontology for Security Engineering (ROSE) from a Risk Treatment perspective. Our proposal leverages on two existing Reference Ontologies: the Common Ontology of Value and Risk and a Reference Ontology of Prevention, both of which are grounded on the Unified Foundational Ontology (UFO). ROSE is employed for modeling and analysing some cases, in particular providing clarification to the semantically overloaded notion of Security Mechanism. (shrink)

In this very issue, Augusto (2022) formulates two requirements upon which to evaluate the adequacy of a foundational ontology. Specifically, the ontological categories: (i) should be understood as the most general kinds of things and (ii) are organized in a non-overlapping finite hierarchy. On the basis of such constraints, he claims that most existing foundational ontologies engineered in the context of Applied Ontology, including the UFO-B ontology, are inadequate. In this article, first we show that his objection against UFO-B can (...) be dissipated by pointing to a trivial terminological confusion. We then argue that his two constraints are not plausible. Then, we show that the disagreement between our point of view and Augusto’s framework is not restricted to those two constraints but extends over the notion of conceptualization of reality. (shrink)