Automatic Information Flow Analysis of Business Process Models

Accorsi, Rafael; Lehmann, Andreas

doi:10.1007/978-3-642-32885-5_13

Cited by 26 publications

(30 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…information flow analysis [3,7,17,29]) on basis of process logs are envisioned, recovered models have to fulfill strict requirements. Specifically, mined models have to show the exact log behavior without introducing additional behavior.…”

Section: Control Flow Discovery Appliedmentioning

confidence: 99%

On the exploitation of process mining for security audits

Accorsi

Stocker

Müller

2013

Proceedings of the 28th Annual ACM Symposium on Applied Computing

Self Cite

View full text Add to dashboard Cite

This paper reports on the potential of process mining as a basis for security audits of business process and corresponding business process management systems. In particular, it focuses on process discovery as a means to reconstruct process-related structures from event logs, such as the process' control flow, social network and data flows. Based on this information, security analysis to determine the compliance with security and privacy requirements can be automated.

show abstract

Section: Control Flow Discovery Appliedmentioning

confidence: 99%

On the exploitation of process mining for security audits

Accorsi

Stocker

Müller

2013

Proceedings of the 28th Annual ACM Symposium on Applied Computing

Self Cite

View full text Add to dashboard Cite

show abstract

“…The same path is adopted in [25] focusing on cloud-based business processes for the purpose of 6 compliance certification, where a number of Petri-net patterns are introduced. In [26], Petri-net is used focusing on information flow analysis of business process models.…”

Section: Graphical/pattern-based Approachesmentioning

confidence: 99%

“…3 non-shaded patterns) are based on [26]. The mapping for the ExistsOften pattern is introduced in [28].…”

Section: Ltl Representationmentioning

confidence: 99%

Formalizing and appling compliance patterns for business process compliance

et al. 2014

View full text Add to dashboard Cite

Document VersionAccepted manuscript including changes made at the peer-review stage Please check the document version of this publication:• A submitted manuscript is the author's version of the article upon submission and before peer-review. There can be important differences between the submitted version and the official published version of record. People interested in the research are advised to contact the author for the final version of the publication, or visit the DOI to the publisher's website.• The final author version and the galley proof are versions of the publication after peer review.• The final published version features the final layout of the paper including the volume, issue and page numbers. Link to publication Citation for published version (APA):Elgammal, A., Turetken, O., van den Heuvel, W., & Papazoglou, M. (2016). Formalizing and appling compliance patterns for business process compliance. Software and Systems Modeling, 15(1), 119-146. DOI: 10.1007/s10270-014-0395-3 General rightsCopyright and moral rights for the publications made accessible in the public portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognise and abide by the legal requirements associated with these rights.• Users may download and print one copy of any publication from the public portal for the purpose of private study or research.• You may not further distribute the material or use it for any profit-making activity or commercial gain • You may freely distribute the URL identifying the publication in the public portal ? Take down policyIf you believe that this document breaches copyright please contact us providing details, and we will remove access to the work immediately and investigate your claim. University, 5000 LE, Tilburg, Netherlands. Email: (w.j.a.m.vdnheuvel, m.p.papazoglou)@uvt.nl Abstract: Today's enterprises demand a high degree of compliance of business processes to meet diverse regulations and legislations. Several industrial studies have shown that compliance management is a daunting task, and organizations are still struggling and spending billions of dollars annually to ensure and prove their compliance. In this paper, we introduce a comprehensive compliance management framework with a main focus on design-time compliance management as a first step towards a preventive lifetime compliance support. The framework enables the automation of compliance related-activities that are amenable to automation, and therefore can significantly reduce the expenditures spent on compliance. It can help experts to carry out their work more efficiently, cut the time spent on tedious manual activities, and reduce potential human errors. An evident candidate compliance activity for automation is the compliance checking, which can be achieved by utilizing formal reasoning and verification techniques. However, formal languages are well-known of their complexity as only versed users in mathematical theories and formal logics are able to use an...

show abstract

“…Re( ) = Re(exOutput( )) (10) end for (11) for each ∈ , V ∈ do (12) for each ∈ ( ) do (13) Re( ) = ⊔ max Re( ) (14) end for (15) if (5) send success message with secure execution path to the requestor (6) else (7) push , into the Execution Path…”

Section: Service Verificationmentioning

confidence: 99%

Distributed Information Flow Verification Framework for the Composition of Service Chain in Wireless Sensor Network

Shen

et al. 2013

International Journal of Distributed Sensor Networks

View full text Add to dashboard Cite

Dynamic service composition provides us with a promising approach to cooperate different sensor nodes in WSN to build complex applications based on their basic functions. Usually multiple nodes located in different regions provide data with different security levels, and it is critical to ensure the security of the information flow in the composite services. However, the energy-limited nature of sensor nodes in WSN poses a significant challenge for the centralized information flow verification with which the verification node needs to consume lots of computation and network resources. In this paper, we specify the security constraints for each service participant to secure the information flow in a service chain based in the lattice model and then present a distributed verification framework that cooperates different service participants to verify their information flow policies distributively. The evaluation results show a significant decrease on the verification cost of the single verification node, which provides a better load balance in each sensor node.

show abstract

Automatic Information Flow Analysis of Business Process Models

Cited by 26 publications

References 31 publications

On the exploitation of process mining for security audits

On the exploitation of process mining for security audits

Formalizing and appling compliance patterns for business process compliance

Distributed Information Flow Verification Framework for the Composition of Service Chain in Wireless Sensor Network

Contact Info

Product

Resources

About