Towards a BPMN Security Extension for the Visualization of Cyber Security Requirements

2020 ◽  
Vol 11 (2) ◽  
pp. 1-17
Author(s):  
Mohamed El Amine Chergui ◽  
Sidi Mohamed Benslimane

Business process modeling notation (BPMN) is a widely used business model process. The importance of security is apparent, but traditionally, it is considered after the business processes definition. There is a need for integrated tools and a methodology that allows for specifying and enforcing compliance and security requirements for business process-driven enterprise systems. Therefore, it is very important to capture the security requirements at conceptual stage in order to identify the security needs. BPMN is lacking the ability to model and present security concepts. This will increase the vulnerability of the system and make the future development of security for the system more difficult. This article proposes a novel extension to BPMN notation based on cyber security ontologies. The authors incorporate visual constructs for modeling security requirements. In order to provide a commonly usable extension, these enhancements were implemented as BPMN metamodel extension. The authors illustrate capabilities and benefits of extension with a real-life example.

Author(s):  
Partha B. Sampathkumaran ◽  
Martin Wirsing

Designing and optimizing a Business Process based on its financial parameters is a challenging task which requires well defined approaches, actions and recommendations which when implemented lead to tangible and quantifiable results. In this paper the authors consider Business Processes represented through the Business Process Modeling Notation with their Costs evaluated through a pattern based methodology. Using this concept of Cost calculation the authors analyze the effect of different well known best practices on the financial parameters of the process. In this study the authors also evaluate the impact of each task in a process on the overall Cost through Sensitivity Analysis leading to a structured approach to parameter variation to achieve financial optimization. The study briefly introduces the Business Process Modeling Notation, Workflow Patterns, and available Performance Measures Evaluation Techniques and recommends an adaptation of Devils Quadrangle suitable for impact evaluation.


Author(s):  
Witold Abramowicz ◽  
Agata Filipowska ◽  
Monika Kaczmarek ◽  
Tomasz Kaczmarek

Semantic Business Process Management (SBPM) bridges the gap between business and IT by taking advantage of the Semantic Web technologies. The foundation for SBPM is the detailed ontological description of enterprise models. These models encompass also business processes taking place in enterprises. Within this chapter, we show how the process-oriented knowledge may be captured for the needs of SBPM. For this reason, we describe semantically enhanced Business Process Modeling Notation (sBPMN) being a conceptualization of one of the main process modeling notations with the fast growing popularity among the tool vendors, namely BPMN. The sBPMN ontology is based on the BPMN specification and may be used as a serialization format by the BPMN modeling tools, thus, making creation of annotations invisible to users. In this chapter, we also present an example of a process model description.


Author(s):  
Matthias Kloppmann ◽  
Dieter Koenig ◽  
Simon Moser

This chapter introduces a set of languages intended to model and run business processes. The Business Process Modeling Notation 1.1 (BPMN) is a notation used to graphically depict business processes. BPMN is able to express choreographies, i.e. the cooperation of separate, autonomous business processes to jointly achieve a larger scenario. Since BPMN is only a notation, there is no specification for a meta-model that allows rendering BPMN choreographies into an executable form. This chapter describes how the Service Component Architecture (SCA) and the Web Services Business Process Execution Language (WS-BPEL) help to close that gap. BPMN, SCA and WS-BPEL can jointly be used and combined to model, deploy and execute business process choreographies. We will also integrate the related BPEL4People specification, since BPMN allows human ‘user tasks’, but WS-BPEL focuses only on automated business process. The authors argue that, based on these specifications, the dichotomy between modeling and execution can be addressed efficiently. In this chapter, we will show that a key aspect of the future of Business Process Management is to combine graphical modeling (via BPMN) with a precise specification of an executable business process (via WS-BPEL and related standards).


Author(s):  
Terje Wahl ◽  
Guttorm Sindre

Evaluation of modelling languages is important both to be able to select the most suitable languages according to the needs and to improve existing languages. In this chapter, business process modeling notation (BPMN) is presented and analytically evaluated according to the semiotic quality framework. BPMN is a functionally oriented language well suited for modeling within the domain of business processes, and probably general processes outside of the business domain. The evaluation indicates that BPMN is easily learned for simple use, and business process diagrams (BPDs) are relatively easy to understand. Tools can fairly easily map BPDs into the Web Services Business Process Execution Language (WS-BPEL) (formerly known as BPEL4WS) format, but executable systems then require creation of Web services representing the activities in BPDs. An evaluation according to the Bunge-Wand-Weber (BWW) ontology is useful for finding ontological discrepancies, and the semiotic framework is useful for evaluating quality on a relatively general level. Thus, these methods complement each other.


2011 ◽  
Vol 5 (1) ◽  
pp. 57-67 ◽  
Author(s):  
Antoni Ligęza

Business Process Modeling Notation has become a powerful and widely accepted visual language for modeling business processes. Despite its expressive power and high usability, a weak point of BPMN is the lack of formal semantics and difficulties with assuring correctness of the overall process. In this paper an attempt is made towards investigation and development of foundations for a logical, declarative model for BPMN. Such model should enable formal analysis of desired properties referring to correct operation of Business Processes modeled with use of BPMN.


Author(s):  
Donald R. Chand ◽  
Alina M. Chircu

This chapter presents a variety of business process modeling notations that range from programming logic flowcharts to the new standard, BPMN (Business Process Modeling Notation), as put forth by the Business Process Management Initiative (BPMI) (http://www.bpmi.org). Specifically, it discusses (1) the use of unstructured programming flowcharts in modeling business processes and their adaptation in process flow diagramming notation, (2) the UML activity diagram, and (3) BPMN, a comprehensive notation for documenting and modeling complex business processes. Using simple examples, this chapter brings out the inherent complexity of modeling business processes and the need for modeling tools that synchronize and align the mental models of business users, process analyst and information technology (IT) systems developers in order to correctly represent the intended process.


Author(s):  
VITUS S. W. LAM

Business Process Modeling Notation (BPMN) plays a significant role in the specification of business processes. To ascertain the validity of BPMN models, a disciplined approach to analyze their behavior is of particular interest to the field of business process management. This paper advocates a semantics-preserving method for transforming BPMN models into New Symbolic Model Verifier (NuSMV) language as a means to verify the models. A subset of BPMN is specified rigorously in the form of a mathematical model. With this foundation in place, the translation for the subset of BPMN notational elements is then driven by a set of formally defined rules. The practicality of our approach is exemplified using an on-line flight reservation service.


Author(s):  
Nadiya Bakalo ◽  
Viktor Gryshko ◽  
Olena Sushchenko

The main business processes of a tourist enterprise aimed at creating a tourist product are considered. It is defined the essence of the business process of a tourist enterprise and highlighted its properties. The business model is considered and formed, which is divided into four main levels. Several methods have been identified for business process modeling, based on a structured and objectively oriented approach to modeling. The business processes of tourist product realization are structured.


2018 ◽  
Vol 25 (2) ◽  
pp. 269-283
Author(s):  
Rosemara Santos Deniz Amarilla ◽  
Alfredo Iarozinski Neto

Resumo O presente trabalho teve como objetivo principal apresentar o estudo dos processos de negócio de empresas de pequeno porte do subsetor de edificações. A partir do estudo dos processos desenvolveu-se um modelo básico de processos de negócio. Para tanto, utilizou-se o método de estudo de casos múltiplos como técnica principal para identificar os processos comuns entre as empresas estudadas. Participaram deste trabalho cinco empresas do subsetor de edificações da cidade de Curitiba, Paraná, Brasil. Para coletar os dados realizaram-se entrevistas semiestruturadas, análises de documentos e observações diretas in loco. Com base nas informações obtidas desenvolveu-se a modelagem dos processos de negócio utilizando a notação BPMN (Business Process Modeling Notation). Assim, o estudo possibilitou elaborar um modelo básico que apresenta as melhores práticas pautado no modelo PCF (Process Classification Framework), porquanto adequado e compatível com a realidade das organizações que atuam no subsetor de edificações. O framework obtém uma visão única dos processos, apresentando as principais atividades de cada processo de negócio com o intuito de transmitir um único linguajar dentro da empresa.


Author(s):  
Evellin Cardoso ◽  
João Paulo A. Almeida ◽  
Renata S. S. Guizzardi ◽  
Giancarlo Guizzardi

While traditional approaches in business process modeling tend to focus on “how” the business processes are performed (adopting a behavioral description in which business processes are described in terms of procedural aspects), in goal-oriented business process modeling, the proposals strive to extend traditional business process methodologies by providing a dimension of intentionality to business processes. One of the key difficulties in enabling one to model goal-oriented processes concerns the identification or elicitation of goals. This paper reports on a case study conducted in a Brazilian hospital, which obtained several goal models represented in i*/Tropos, each of which correspond to a business process also modeled in the scope of the study. NFR catalogues were helpful in goal elicitation, uncovering goals that did not come up during previous interviews prior to these catalogues’ use.


Sign in / Sign up

Export Citation Format

Share Document