Multi-level privacy analysis of business processes: the Pleak toolset

Author(s):  
Marlon Dumas ◽  
Luciano García-Bañuelos ◽  
Joosep Jääger ◽  
Peeter Laud ◽  
Raimundas Matulevičius ◽  
...  

Sensors ◽  
2021 ◽  
Vol 21 (14) ◽  
pp. 4890
Author(s):  
Athanasios Dimitriadis ◽  
Christos Prassas ◽  
Jose Luis Flores ◽  
Boonserm Kulvatunyou ◽  
Nenad Ivezic ◽  
...  

Cyber threat information sharing is an imperative process towards achieving collaborative security, but it poses several challenges. One crucial challenge is the plethora of shared threat information. Therefore, there is a need to advance filtering of such information. While the state-of-the-art in filtering relies primarily on keyword- and domain-based searching, these approaches require sizable human involvement and rarely available domain expertise. Recent research revealed the need for harvesting of business information to fill the gap in filtering, albeit it resulted in providing coarse-grained filtering based on the utilization of such information. This paper presents a novel contextualized filtering approach that exploits standardized and multi-level contextual information of business processes. The contextual information describes the conditions under which a given threat information is actionable from an organization perspective. Therefore, it can automate filtering by measuring the equivalence between the context of the shared threat information and the context of the consuming organization. The paper directly contributes to filtering challenge and indirectly to automated customized threat information sharing. Moreover, the paper proposes the architecture of a cyber threat information sharing ecosystem that operates according to the proposed filtering approach and defines the characteristics that are advantageous to filtering approaches. Implementation of the proposed approach can support compliance with the Special Publication 800-150 of the National Institute of Standards and Technology.







2020 ◽  
pp. 100-104
Author(s):  
Vera V. Krainova

Effective internal control is essential for successful operations and management of shipping companies. For its implementation, the most important task is to determine the objects of internal control, that is, the scope of its application. Internal control, as a management function, is aimed at solving management problems, therefore, in the author's opinion, objects of management and objects of internal control are identical. Based on the analysis of the approaches of various authors to the choice of management objects, the author's approach has been developed, taking into account the interaction of all elements of the management system, the multidimensional and multi-level nature of management process, and branch features of shipping business. A classification of objects of internal control in shipping companies has been developed with the allocation of such objects as resources, business processes, results of functioning, management decisions. The disclosure of the content of these objects shows that internal control covers all levels of the shipping company, including both the managed and the control systems.



2019 ◽  
Vol 18 (6) ◽  
pp. 3235-3264 ◽  
Author(s):  
Pille Pullonen ◽  
Jake Tom ◽  
Raimundas Matulevičius ◽  
Aivo Toots


2021 ◽  
Author(s):  
Tahani Hussein Abu Musa ◽  
Abdelaziz Bouras

In our proposed work, we propose an anomaly detection framework, for detecting anomalous transactions in business processes from transaction event logs. Such a framework will help enhance the accuracy of anomaly detection in the global Supply Chain, improve the multi-level business processes workflow in the Supply Chain domain, and will optimize the processes in the Supply Chain in terms of security and automation. In the proposed work Ontology is utilized to provide anomaly classification in business transactions, based on crafted SWRL rules for that purpose. Our work has been evaluated based on logs generated from simulating a generic business process model related to a procurement scenario, and the findings show that our framework can detect and classify anomalous transactions form those logs.



2021 ◽  
pp. 79-86
Author(s):  
Олег Євгенович Федорович ◽  
Юрій Леонідович Прончаков ◽  
Аліна Володимирівна Єлізєва ◽  
Юлія Олександрівна Лещенко

The problem of research of business processes related to the organization and management of projects to create the new complex technical products in aerospace, shipbuilding, and other fields of mechanical engineering is stated and solved. The relevance of the study is related to the planning of a set of business processes, taking into account the architectural representation of the complex product being created. The study aims to develop a new method of synthesis of the multilevel complex of business processes to manage the creation of new technology, taking into account the multi-component representation of the complex product architecture. Much attention is paid to the complex product architecture, which is presented as a set of interconnected components. The following component types are outlined: components that can be reused; components that can be adapted to the requirements of the new product; innovative components. The types of components are studied in terms of the building of the set of business processes on their creation, taking into account the main indicators (costs, execution time, risks). Using the positive experience of past developments in the form of ready-to-use business processes helps to minimize the risks, and the new business solutions in their turn ensure the competitiveness of the complex product. The information base of positive past business processes in the form of precedents base is being built. The precedents base is used to find the close analogs of ready-to-use business processes. The set of business processes related to the management of complex product creation is formed. It has a multilevel representation that fully corresponds to the tree-like component architecture of the complex product. The method to synthesize the complexity of business processes that are planned to perform the tasks on the management of projects on creation of complex products for the developing enterprise is constructed. It is based on the “from top to bottom” system design principle. The optimization model to find the minimum costs, time, and risks in the process of business processes creation that takes into account the multilevel structure of the business process is built. The simulation event-based model in the form of a related agent set is used to study the successful execution of planned business processes related to the creation of the complex product. The results of this study should be used in the practice of creating innovative technical products that have a complex multi-level component architecture for the organization and planning of business processes related to development management. Mathematical methods used: systems analysis, precedent theory, lexicographic ordering, component design, integer optimization, simulation modeling.



Sign in / Sign up

Export Citation Format

Share Document