Business Process Security Analysis – Design Time, Run Time, Audit Time

2013 ◽  
Vol 55 (6) ◽  
Author(s):  
Frank Böhr ◽  
Linh Thao Ly ◽  
Günter Müller
2013 ◽  
Vol 55 (6) ◽  
Author(s):  
Frank Böhr ◽  
Linh Thao Ly ◽  
Günter Müller

AbstractThis paper reports on approaches and tool support for security and compliance analysis of executable business processes, so-called workflows, employed in the GESINE project. Specifically, focusing on the business layer and the corresponding workflow entities along the business process management lifecycle (i. e., workflow model, instance and event log), the techniques reported on in this paper cover the design time, run time and audit time analysis. Their goal is to verify the adherence to security requirements, such as the four-eyes principle and separation and binding of duties. Altogether, the complementary techniques described in this paper enable a holistic approach to ensure the security of workflows.


Author(s):  
Andreas Weichslgartner ◽  
Stefan Wildermann ◽  
Johannes Götzfried ◽  
Felix Freiling ◽  
Michael Glaß ◽  
...  
Keyword(s):  

Author(s):  
Macello La Rosa ◽  
Marlon Dumas ◽  
Arthur H.M. ter Hofstede

A reference process model represents multiple variants of a common business process in an integrated and reusable manner. It is intended to be individualized in order to fit the requirements of a specific organization or project. This practice of individualizing reference process models provides an attractive alternative with respect to designing process models from scratch; in particular, it enables the reuse of proven practices. This chapter introduces techniques for representing variability in the context of reference process models, as well as techniques that facilitate the individualization of reference process models with respect to a given set of requirements.


Author(s):  
Amani S. Ibrahim ◽  
James Hamlyn-Harris ◽  
John Grundy ◽  
Mohamed Almorsy
Keyword(s):  

2009 ◽  
Vol 18 (03n04) ◽  
pp. 423-479 ◽  
Author(s):  
MARCO STUIT ◽  
NICK B. SZIRBIK

This paper presents the process-oriented aspects of a formal and visual agent-based business process modeling language. The language is of use for (networks of) organizations that elect or envisage multi-agent systems for the support of collaborative business processes. The paper argues that the design of a collaborative business process should start with a proper understanding of the work practice of the agents in the business domain under consideration. The language introduces a novel diagram to represent the wide range of (cross-enterprise) business interactions as a hierarchy of role-based interactions (including their ordering relations) in a tree structure. The behaviors owned by the agents playing the roles in the tree are specified in separate process diagrams. A collaborative business process studied in the context of a case study at a Dutch gas transport company is used to exemplify the modeling approach. Explicit (agent-based) process models can and should be verified using formal methods. In the business process community, design-time verification of a process design is considered vital in order to ensure the correctness and termination of a collaborative business process. The proposed modeling approach is enhanced with a design-time verification method. The direction taken in this research is to combine the interaction tree and the associated agent behaviors into a verifiable hierarchical colored Petri net in order to take advantage of its well-defined (execution) semantics and proven (computerized) verification techniques. The verification method presented in this paper consists of three steps: (1) the translation of the agent-based process design to a hierarchical colored Petri net, (2) the identification of process design errors, and (3) the correction and rollback of process design errors to the agent-based model. The translation technique has been implemented in a software tool that outputs the hierarchical colored Petri net in a format that can be loaded in the widely used CPN Tools software package. Verification results are discussed for the case study model.


2011 ◽  
Vol 5 (2) ◽  
pp. 123 ◽  
Author(s):  
C. Ykman-Couvreur ◽  
P. Avasare ◽  
G. Mariani ◽  
G. Palermo ◽  
C. Silvano ◽  
...  

2019 ◽  
Vol 4 (2) ◽  
pp. 116
Author(s):  
Hilman Nuril Hadi ◽  
Tri Astoto Kurniawan ◽  
Ismiarta Aknuranda

BPMN has become the standard of business process modeling indescribing the existing series of business process. By engaging BPMN, an analystwould possibly able to model the whole business process activities in whichhe/she may analyze business process upon design time. It can be done byanalyzing the structure, behavior, or semantic of process model. In certaincondition one may ask a question what would the effects of the process be if itwere to be executed up to this point?. However, it cannot be solved with onlygraphical notation, but with its semantics. In practice, several modeling tools stilldo not provide a feature for managing information regarding the effects/resultsin the business process model. In fact, analysts should be supported with a toolin order to semantically enrich a process model with its effects. This articledescribes effect annotation semantically towards activity in the BPMN modelincluding the rules in representing its effects. The effect annotation will be suitedtowards activity type (atomic and compound activities). The outcomes of plugin development of eclipse BPMN2 modeler for representing semantic effect arealso described in this paper.


Sign in / Sign up

Export Citation Format

Share Document