Modern 5G-Advanced and emerging 6G architectures face complex, multi-layered threat vectors that outpace traditional manual security configurations. Shifting security management towards autonomous, self-protecting operation requires formal semantic frameworks. This work specifies the TM Forum TR292I Security Ontology v4.0.0, a standardized Resource Description Framework Schema (RDFS) compliant vocabulary for declarative security management. By natively extending the TM Forum Intent Common Model (ICM), the ontology decouples high-level security goals from underlying technical controls. Crucially, it embeds resource cost mapping properties to ensure autonomous mitigation actions safeguard Service Level Agreements (SLAs). We validate this model-driven architecture through a formal semantic walkthrough of a distributed Denial of Service (DDoS) mitigation sequence on a disaggregated Next-Generation NodeB (gNB) slice using W3C Turtle and SPARQL. The results demonstrate that runtime constraint conflicts are resolved dynamically without human intervention, establishing a reproducible framework for standardized, intent-driven network security orchestration.

翻译：现代5G-Advanced及新兴的6G架构面临着复杂且多层次的威胁向量，这些威胁向量远远超出了传统手动安全配置的应对能力。将安全管理转向自主、自保护的操作需要形式化的语义框架。本工作详细阐述了TM Forum TR292I安全本体v4.0.0，这是一种用于声明式安全管理的标准化资源描述框架模式（RDFS）兼容词汇表。通过原生扩展TM Forum意图通用模型（ICM），该本体将高层安全目标与底层技术控制解耦。至关重要的一点是，它嵌入了资源成本映射属性，以确保自主缓解措施能够保障服务等级协议（SLA）。我们通过一个正式的语义演练来验证这种模型驱动架构，该演练针对解耦的下一代NodeB（gNB）切片上的分布式拒绝服务（DDoS）缓解序列，使用了W3C Turtle和SPARQL。结果表明，运行时约束冲突无需人工干预即可动态解决，为标准化、意图驱动的网络安全编排建立了可复现的框架。