CAC Extremist Child Exploitation Enterprise Ontology
type: Ontology
comment: An ontology for representing extremist criminal enterprises engaged in child exploitation, including nihilistic violent extremism (NVE) networks, content compilation systems, and enterprise structures based on analysis of the 764 network case. This ontology is grounded in the Unified Foundational Ontology (UFO) through gUFO.
version IRI: https://cacontology.projectvic.org/extremist-enterprises/3.1.0
version info: 3.1.0
creator: CAC Ontology Team
issued: 2025-04-15
modified: 2026-08-09
imports: https://ontology.unifiedcyberontology.org/uco/core/1.5.0
imports: https://ontology.unifiedcyberontology.org/uco/observable/1.5.0
imports: https://ontology.unifiedcyberontology.org/uco/action/1.5.0
imports: https://ontology.unifiedcyberontology.org/uco/role/1.5.0
imports: https://ontology.caseontology.org/case/case/1.5.0
imports: https://cacontology.projectvic.org/3.1.0
imports: https://cacontology.projectvic.org/international/3.1.0
imports: http://purl.org/nemo/gufo#/1.0.0
imports: https://cacontology.projectvic.org/core/3.1.0

Nihilistic Violent Extremism Network
type: Kind
type: Class
comment: Criminal network engaging in child exploitation as part of broader nihilistic violent extremism goals including social unrest and downfall of current world order (e.g., 764 network).
subclass of: Organization
subclass of: FunctionalComplex

Child Exploitation Enterprise
type: Kind
type: Class
comment: Criminal enterprise as defined in 18 U.S.C. § 2252A(g) engaging in coordinated child exploitation activities with multiple participants and systematic operations.
subclass of: Organization
subclass of: FunctionalComplex

Accelerationist Group
type: SubKind
type: Class
comment: Extremist group with accelerationist goals seeking to hasten societal collapse through criminal activities including child exploitation.
subclass of: Nihilistic Violent Extremism Network

Extremist Network Cell
type: SubKind
type: Class
comment: Operational cell within larger extremist network conducting specialized activities.
subclass of: Nihilistic Violent Extremism Network

Cyber Extremist Network
type: SubKind
type: Class
comment: Extremist network operating primarily through digital platforms and encrypted communications.
subclass of: Nihilistic Violent Extremism Network

Enterprise Role
type: Role
type: Class
comment: Role within child exploitation enterprise structure.
subclass of: Role

Enterprise Leader Role
type: Role
type: Class
comment: Leadership role within child exploitation enterprise, directing and coordinating activities.
subclass of: Enterprise Role

Inner Core Member Role
type: Role
type: Class
comment: Role of member within enterprise inner core with access to restricted channels and advanced operations.
subclass of: Enterprise Role

Content Producer Role
type: Role
type: Class
comment: Role focused on producing high-quality exploitative content for enterprise operations.
subclass of: Enterprise Role

Recruitment Specialist Role
type: Role
type: Class
comment: Role specializing in recruiting new members based on content quality and enterprise needs.
subclass of: Enterprise Role

Coordinator Role
type: Role
type: Class
comment: Role coordinating activities across different platforms and channels within enterprise.
subclass of: Enterprise Role

Lorebook
type: Kind
type: Class
comment: Edited compilation of victim content including images, videos, and personal information organized by enterprise members.
subclass of: ObservableObject
subclass of: Artifact

Victim Content Compilation
type: SubKind
type: Class
comment: Organized compilation of content obtained from specific victim through exploitation and coercion.
subclass of: Lorebook

Content Editing Process
type: EventType
type: Class
comment: Process of editing and organizing victim content into compilations for enterprise distribution.
subclass of: ExploitationEvent

Content Curation Action
type: EventType
type: Class
comment: Action of curating and organizing exploitative content for enterprise purposes.
subclass of: ExploitationEvent

Content Value Assessment
type: EventType
type: Class
comment: Assessment of content value based on quality, notoriety, and enterprise utility.
subclass of: ExploitationEvent

Content Based Recruitment
type: EventType
type: Class
comment: Recruitment of new members based on quality and notoriety of content they produce.
subclass of: ExploitationEvent

Self Harm Coercion
type: EventType
type: Class
comment: Coercion of victims to engage in self-harm activities including cutting, burning, and extreme degradation.
subclass of: ExploitationEvent

Extreme Degradation Coercion
type: EventType
type: Class
comment: Coercion of victims to engage in extreme degrading activities beyond typical exploitation.
subclass of: ExploitationEvent
subclass of: Event

Name Cutting Coercion
type: EventType
type: Class
comment: Coercion of victims to cut enterprise member names into their bodies as ownership marking.
subclass of: Self Harm Coercion
subclass of: Event

Self Immolation Coercion
type: EventType
type: Class
comment: Coercion of victims to set themselves on fire or engage in burning activities.
subclass of: Self Harm Coercion
subclass of: Event

Animal Abuse Coercion
type: EventType
type: Class
comment: Coercion of victims to abuse pets or animals as part of exploitation and control.
subclass of: Extreme Degradation Coercion
subclass of: Event

Sibling Abuse Coercion
type: EventType
type: Class
comment: Coercion of victims to abuse siblings or family members as part of exploitation.
subclass of: Extreme Degradation Coercion
subclass of: Event

Suicide Coercion
type: EventType
type: Class
comment: Coercion of victims toward suicide as ultimate form of exploitation and control.
subclass of: Extreme Degradation Coercion
subclass of: Event

Vulnerable Population Targeting
type: EventType
type: Class
comment: Systematic targeting of vulnerable populations including minors with mental health challenges.
subclass of: ExploitationEvent

Mental Health Vulnerability Targeting
type: EventType
type: Class
comment: Targeting of minors with mental health challenges and psychological vulnerabilities.
subclass of: Vulnerable Population Targeting
subclass of: Event

Social Engineering Campaign
type: EventType
type: Class
comment: Systematic social engineering campaign to gain victim trust and facilitate exploitation.
subclass of: ExploitationEvent

Trust Building Process
type: EventType
type: Class
comment: Process of building trust with vulnerable victims before exploitation begins.
subclass of: Social Engineering Campaign
subclass of: Event

Victim Profile Development
type: EventType
type: Class
comment: Development of detailed victim profiles including vulnerabilities and exploitation opportunities.
subclass of: ExploitationEvent

Cross Platform Coordination
type: EventType
type: Class
comment: Coordination of enterprise activities across multiple internet platforms and channels.
subclass of: ExploitationEvent

Private Group Management
type: EventType
type: Class
comment: Management of private groups and channels with restricted access for enterprise operations.
subclass of: ExploitationEvent

Platform Migration Strategy
type: EventType
type: Class
comment: Strategy for migrating operations between platforms when accounts are terminated or restricted.
subclass of: ExploitationEvent

Covert Employee Operation
type: EventType
type: Class
comment: Operation using online covert employees (OCE) to infiltrate and monitor extremist networks.
subclass of: InvestigativeAction

Encrypted Channel Infiltration
type: EventType
type: Class
comment: Infiltration of encrypted channels used by extremist networks for evidence collection.
subclass of: Covert Employee Operation
subclass of: Event

Cross Platform Evidence Correlation
type: EventType
type: Class
comment: Correlation of evidence across multiple platforms to establish identity and network connections.
subclass of: InvestigativeAction

Identity Correlation Analysis
type: EventType
type: Class
comment: Analysis correlating multiple accounts and identities across platforms to establish single individual control.
subclass of: Cross Platform Evidence Correlation
subclass of: Event

Network Mapping Investigation
type: EventType
type: Class
comment: Investigation mapping the structure and relationships within extremist child exploitation networks.
subclass of: InvestigativeAction

Enterprise Hierarchy
type: Kind
type: Class
comment: Organizational hierarchy within child exploitation enterprise defining leadership and member roles.
subclass of: UcoObject
subclass of: FunctionalComplex

Inner Core
type: SubKind
type: Class
comment: Elite inner core of enterprise members with access to restricted channels and advanced activities.
subclass of: Enterprise Hierarchy

Leadership Structure
type: SubKind
type: Class
comment: Leadership structure of enterprise including multiple leaders and their areas of control.
subclass of: Enterprise Hierarchy

Recruitment Hierarchy
type: SubKind
type: Class
comment: Hierarchy governing recruitment of new members based on content quality and notoriety.
subclass of: Enterprise Hierarchy

Membership Tier
type: Phase
type: Class
comment: Membership tier within enterprise hierarchy determining access and privileges.
subclass of: Enterprise Hierarchy
subclass of: Phase

Content Compilation System
type: Kind
type: Class
comment: System for compiling, editing, and organizing exploitative content within criminal enterprise.
subclass of: UcoObject
subclass of: FunctionalComplex

Content Currency System
type: Kind
type: Class
comment: System using exploitative content as valuable currency within criminal enterprise for advancement and access.
subclass of: UcoObject
subclass of: FunctionalComplex

Membership Advancement System
type: SubKind
type: Class
comment: System governing member advancement within enterprise based on content contributions and activities.
subclass of: Content Currency System
subclass of: FunctionalComplex

Access Control System
type: SubKind
type: Class
comment: System controlling access to enterprise channels and resources based on member status and content contributions.
subclass of: Content Currency System
subclass of: FunctionalComplex

Encrypted Channel Network
type: Kind
type: Class
comment: Network of encrypted messaging channels used for enterprise coordination and content sharing.
subclass of: ObservableObject
subclass of: FunctionalComplex

Alternate Account System
type: Kind
type: Class
comment: System of alternate accounts (alts) used to evade platform restrictions and maintain operations.
subclass of: UcoObject
subclass of: FunctionalComplex

network size
type: DatatypeProperty
comment: Estimated size of extremist network in number of participants.
domain: Nihilistic Violent Extremism Network
range: nonNegativeInteger

operational scope
type: DatatypeProperty
comment: Geographic scope of network operations (local, national, international).
domain: Nihilistic Violent Extremism Network
range: string

ideological framework
type: DatatypeProperty
comment: Ideological framework driving network activities (nihilistic, accelerationist, anarchist).
domain: Nihilistic Violent Extremism Network
range: string

network notoriety
type: DatatypeProperty
comment: Level of notoriety and recognition of network within extremist communities.
domain: Nihilistic Violent Extremism Network
range: string

leadership count
type: DatatypeProperty
comment: Number of individuals in leadership roles within enterprise.
domain: Child Exploitation Enterprise
range: nonNegativeInteger

inner core size
type: DatatypeProperty
comment: Number of members in enterprise inner core with advanced access.
domain: Inner Core
range: nonNegativeInteger

membership requirements
type: DatatypeProperty
comment: Requirements for enterprise membership and advancement.
domain: Child Exploitation Enterprise
range: string

hierarchy complexity
type: DatatypeProperty
comment: Complexity level of enterprise hierarchy (simple, moderate, complex, highly_complex).
domain: Enterprise Hierarchy
range: string

content volume items
type: DatatypeProperty
comment: Number of individual content items in compilation.
domain: Lorebook
range: nonNegativeInteger

compilation complexity
type: DatatypeProperty
comment: Complexity level of content compilation and editing.
domain: Lorebook
range: string

editing quality
type: DatatypeProperty
comment: Quality level of content editing and organization.
domain: Content Editing Process
range: string

content notoriety
type: DatatypeProperty
comment: Notoriety level of content within enterprise and broader network.
domain: Lorebook
range: string

content value
type: DatatypeProperty
comment: Assessed value of content within enterprise currency system.
domain: Content Value Assessment
range: decimal

membership level
type: DatatypeProperty
comment: Member level within enterprise hierarchy (novice, member, advanced, inner_core, leader).
domain: Membership Tier
range: string

advancement criteria
type: DatatypeProperty
comment: Criteria required for advancement to higher membership levels.
domain: Membership Advancement System
range: string

access level
type: DatatypeProperty
comment: Level of access to enterprise resources and channels.
domain: Access Control System
range: string

coercion severity
type: DatatypeProperty
comment: Severity level of coercion methods used (moderate, severe, extreme, life_threatening).
domain: Self Harm Coercion
range: string

degradation level
type: DatatypeProperty
comment: Level of degradation and humiliation involved in coercion.
domain: Extreme Degradation Coercion
range: string

self harm type
type: DatatypeProperty
comment: Type of self-harm coerced (cutting, burning, bruising, other).
domain: Self Harm Coercion
range: string

coercion effectiveness
type: DatatypeProperty
comment: Effectiveness of coercion methods in victim compliance.
domain: Self Harm Coercion
range: decimal

vulnerability type
type: DatatypeProperty
comment: Type of vulnerability targeted (mental_health, isolation, trauma, substance_abuse).
domain: Vulnerable Population Targeting
range: string

targeting precision
type: DatatypeProperty
comment: Precision level of vulnerability targeting methods.
domain: Vulnerable Population Targeting
range: string

social engineering complexity
type: DatatypeProperty
comment: Complexity level of social engineering campaigns.
domain: Social Engineering Campaign
range: string

trust building duration
type: DatatypeProperty
comment: Duration of trust building process before exploitation begins in days.
domain: Trust Building Process
range: decimal

platform count
type: DatatypeProperty
comment: Number of platforms used for coordination and operations.
domain: Cross Platform Coordination
range: nonNegativeInteger

encryption level
type: DatatypeProperty
comment: Level of encryption used in communications (basic, strong, military_grade).
domain: Encrypted Channel Network
range: string

channel count
type: DatatypeProperty
comment: Number of channels maintained in encrypted network.
domain: Encrypted Channel Network
range: nonNegativeInteger

alt account count
type: DatatypeProperty
comment: Number of alternate accounts maintained per member.
domain: Alternate Account System
range: nonNegativeInteger

infiltration duration
type: DatatypeProperty
comment: Duration of covert infiltration operation in days.
domain: Encrypted Channel Infiltration
range: decimal

evidence quality
type: DatatypeProperty
comment: Quality level of evidence obtained through covert operations.
domain: Covert Employee Operation
range: string

identity correlation accuracy
type: DatatypeProperty
comment: Accuracy level of identity correlation across platforms (0.0-1.0).
domain: Identity Correlation Analysis
range: decimal

network mapping completeness
type: DatatypeProperty
comment: Completeness of network mapping investigation (0.0-1.0).
domain: Network Mapping Investigation
range: decimal

has network cell
type: ObjectProperty
comment: Links extremist network to its operational cells.
domain: Nihilistic Violent Extremism Network
range: Extremist Network Cell

operates enterprise
type: ObjectProperty
comment: Links network to child exploitation enterprise it operates.
domain: Nihilistic Violent Extremism Network
range: Child Exploitation Enterprise

has hierarchy
type: ObjectProperty
comment: Links enterprise to its organizational hierarchy.
domain: Child Exploitation Enterprise
range: Enterprise Hierarchy

has inner core
type: ObjectProperty
comment: Links enterprise to its inner core structure.
domain: Child Exploitation Enterprise
range: Inner Core

holds leadership role
type: ObjectProperty
comment: Links individual to leadership role in enterprise.
domain: Person
range: Enterprise Leader Role

participates in inner core
type: ObjectProperty
comment: Links individual to inner core membership.
domain: Person
range: Inner Core

recruits members
type: ObjectProperty
comment: Links recruitment specialist to members they recruit.
domain: Recruitment Specialist Role
range: Person

coordinates activities
type: ObjectProperty
comment: Links coordinator to activities they coordinate.
domain: Coordinator Role
range: Action

produces lorebook
type: ObjectProperty
comment: Links content producer to lorebook they create.
domain: Content Producer Role
range: Lorebook

compiles content
type: ObjectProperty
comment: Links compilation system to content it compiles.
domain: Content Compilation System
range: ObservableObject

contains victim content
type: ObjectProperty
comment: Links lorebook to victim content it contains.
domain: Lorebook
range: ObservableObject

uses as currency
type: ObjectProperty
comment: Links content currency system to content used as currency.
domain: Content Currency System
range: Lorebook

coerces into self harm
type: ObjectProperty
comment: Links enterprise role to victims coerced into self-harm.
domain: Enterprise Role
range: Person

targets vulnerability
type: ObjectProperty
comment: Links targeting action to specific vulnerability exploited.
domain: Vulnerable Population Targeting
range: UcoObject

builds victim trust
type: ObjectProperty
comment: Links social engineering to trust building process.
domain: Social Engineering Campaign
range: Trust Building Process

exploits victim
type: ObjectProperty
comment: Links enterprise role to victims they exploit.
domain: Enterprise Role
range: Person

coordinates across platforms
type: ObjectProperty
comment: Links enterprise to cross-platform coordination activities.
domain: Child Exploitation Enterprise
range: Cross Platform Coordination

utilizes encrypted channels
type: ObjectProperty
comment: Links enterprise to encrypted channel networks used.
domain: Child Exploitation Enterprise
range: Encrypted Channel Network

manages private groups
type: ObjectProperty
comment: Links coordinator to private groups they manage.
domain: Coordinator Role
range: ObservableObject

maintains alt accounts
type: ObjectProperty
comment: Links enterprise member to alternate accounts they maintain.
domain: Person
range: Alternate Account System

infiltrates network
type: ObjectProperty
comment: Links covert operation to network being infiltrated.
domain: Covert Employee Operation
range: Nihilistic Violent Extremism Network

correlates evidence
type: ObjectProperty
comment: Links investigation to evidence correlation performed.
domain: Cross Platform Evidence Correlation
range: ObservableObject

maps network structure
type: ObjectProperty
comment: Links mapping investigation to network structure mapped.
domain: Network Mapping Investigation
range: Enterprise Hierarchy

identifies network member
type: ObjectProperty
comment: Links investigation to network members identified.
domain: Identity Correlation Analysis
range: Person

has network component
type: ObjectProperty
comment: Links network to its functional components using gUFO component-of pattern.
domain: Nihilistic Violent Extremism Network
range: EnduringEntity
sub property of: isComponentOf

has member
type: ObjectProperty
comment: Links enterprise to its members using gUFO collection membership pattern.
domain: Child Exploitation Enterprise
range: Person
sub property of: isCollectionMemberOf

has operational period
type: ObjectProperty
comment: Links enterprise to its operational time period.
domain: Child Exploitation Enterprise
range: Event

has formation event
type: ObjectProperty
comment: Links network to the event of its formation.
domain: Nihilistic Violent Extremism Network
range: Event

has network notoriety quality
type: ObjectProperty
comment: Links network to its notoriety as a reified quality.
domain: Nihilistic Violent Extremism Network
range: Quality

has encryption capability
type: ObjectProperty
comment: Links encrypted network to its encryption capability as a mode.
domain: Encrypted Channel Network
range: IntrinsicMode

has recruitment mode
type: ObjectProperty
comment: Links enterprise to its recruitment operation mode.
domain: Child Exploitation Enterprise
range: IntrinsicMode

operates in situation
type: ObjectProperty
comment: Links enterprise operations to the situation context they occur in.
domain: Child Exploitation Enterprise
range: Situation

creates victimization situation
type: ObjectProperty
comment: Links coercion events to victimization situations they create.
domain: Self Harm Coercion
range: Situation

has leadership relation
type: ObjectProperty
comment: Links enterprise to leadership relator mediating leader-follower relationships.
domain: Child Exploitation Enterprise
range: Relator

has exploitation relation
type: ObjectProperty
comment: Links enterprise to exploitation relator mediating perpetrator-victim relationships.
domain: Child Exploitation Enterprise
range: Relator

historically depends on
type: ObjectProperty
comment: Captures historical dependence between enterprise events and prior enabling events.
domain: Event
range: Event

participates in coercion
type: ObjectProperty
comment: Links persons to coercion events they participate in.
domain: Person
range: Self Harm Coercion
sub property of: participatesIn

participates in recruitment
type: ObjectProperty
comment: Links persons to recruitment events they participate in.
domain: Person
range: Content Based Recruitment
sub property of: participatesIn

has operational begin date
type: DatatypeProperty
comment: Begin date of enterprise operational period using gUFO temporal framework.
domain: Child Exploitation Enterprise
range: dateTimeStamp
sub property of: hasBeginPointInXSDDateTimeStamp

has operational end date
type: DatatypeProperty
comment: End date of enterprise operational period using gUFO temporal framework.
domain: Child Exploitation Enterprise
range: dateTimeStamp
sub property of: hasEndPointInXSDDateTimeStamp

has coercion event begin date
type: DatatypeProperty
comment: Begin date of coercion event using gUFO temporal framework.
domain: Self Harm Coercion
range: dateTimeStamp
sub property of: hasBeginPointInXSDDateTimeStamp

has investigation begin date
type: DatatypeProperty
comment: Begin date of investigation event using gUFO temporal framework.
domain: Covert Employee Operation
range: dateTimeStamp
sub property of: hasBeginPointInXSDDateTimeStamp