From ADEPT to AristaFlow BPM Suite: A Research Vision Has Become Reality

Dadam, Peter; Reichert, Manfred; Rinderle-Ma, Stefanie; Lanz, Andreas; Pryss, Rüdiger; Predeschly, Michael; Kolb, Jens; Ly, Linh Thao; Jurisch, Martin; Kreher, Ulrich; Göser, Kevin

doi:10.1007/978-3-642-12186-9_50

Cited by 21 publications

(10 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed compliance enforcement patterns are for example supported by the business process management system AristaFlow BPM Suite 2 [14]. For example, enforcement pattern 1 is realized by defining for an activity that its performer must be the same as the one who also has performed a specific other activity.…”

Section: Support Of Enforcement Patternsmentioning

confidence: 99%

Business Process Security Analysis – Design Time, Run Time, Audit Time

Böhr

Müller

2013

It - Information Technology

Self Cite

View full text Add to dashboard Cite

This paper reports on approaches and tool support for security and compliance analysis of executable business processes, so-called workflows, employed in the GESINE project. Specifically, focusing on the business layer and the corresponding workflow entities along the business process management lifecycle (i. e., workflow model, instance and event log), the techniques reported on in this paper cover the design time, run time and audit time analysis. Their goal is to verify the adherence to security requirements, such as the four-eyes principle and separation and binding of duties. Altogether, the complementary techniques described in this paper enable a holistic approach to ensure the security of workflows.Zusammenfassung Dieser Artikel stellt Ansätze und Tools zur Sicherheitsanalyse von ausführbaren Geschäfts-prozessen, sogenannten Workflows, die im Projekt GESINE untersucht und eingesetzt werden, vor. Ein spezieller Fokus wird dabei auf der Business-Ebene und die damit entlang des BPMLebenszyklus verbundenen Workflow-Artefakte gelegt (d. h. Modell-, Instanz-und Event-Logs). Die hier vorgestellten Techniken decken Designzeit, Laufzeit und log-basierte Analysen ab. Ziel ist die Einhaltung sicherheitsbezogener Anforderungen an Workflows, wie etwa das Vier-Augen-Prinzip, nachzuweisen. Es wird aufgezeigt, dass die vorgestellten Techniken komplementär zueinander sind und die gemeinsame Nutzung daher zu einer ganzheitlicheren Betrachtungsweise von Sicherheitsanforderungen auf der Ebene von Workflows führt.

show abstract

Section: Support Of Enforcement Patternsmentioning

confidence: 99%

Business Process Security Analysis – Design Time, Run Time, Audit Time

Böhr

Müller

2013

It - Information Technology

Self Cite

View full text Add to dashboard Cite

show abstract

“…Related projects on business process adaptivity are, eg, S‐Cube and ADEPT, which support context‐aware adaptation and flexible processes but do not consider further adaptations (eg, based on the executing actor or to support self‐organising groups).…”

Section: Adaptive Business Process Specification Frameworkmentioning

confidence: 99%

Towards functional safety and security for adaptive and flexible business processes

Geist

Natschläger

Illibauer

et al. 2018

J Software Evolu Process

View full text Add to dashboard Cite

Business process management (BPM) provides many benefits for a company including productivity, efficiency, compliance, risk management, consistency, repeatability, and measurability. Many of these aspects also ensure and improve functional safety, privacy, and security in process execution. However, managed business processes lack flexibility; ie, changing a business process requires more effort than ad hoc execution and adaptation. Thus, especially in small companies, the acceptance rate of managed business processes is low. So we claim that in current BPM approaches, the structuredness ensuring functional safety and security concepts contradicts with the objective for flexibility. The main goal of the AdaBPM project is to address this contradiction by providing a formal approach to handle advanced adaptations and exception handling in business processes. The technical objectives of the project include (1) the definition of a basic framework being capable of handling different levels of adaptivity and considering security and safety requirements at the same time, (2) a rigorous process specification language and model refinement methods,(3) static business process adaptations, and (4) dynamic (or ad hoc) adaptations. The result of our research is a general approach for flexible BPM combined with the possibility to nevertheless manage the process and define safety and security restrictions.

show abstract

“…• Aristaflow [4,6] allows for hierarchical process definitions, declaration of input and output behavior of a process (called graph template), and has a kind of local context that is type-safe for dealing with data objects in terms of data bases, i.e., data structures similar to struct in the programming language C or simple records. All other types are hidden beneath java.lang.Object.…”

Section: Related Modeling Approachesmentioning

confidence: 99%

Higher-Order Process Modeling: Product-Lining, Variability Modeling and Beyond

Neubauer

Steffen

Margaria

2013

Electron. Proc. Theor. Comput. Sci.

View full text Add to dashboard Cite

We present a graphical and dynamic framework for binding and execution of (business) process models. It is tailored to integrate 1) ad hoc processes modeled graphically, 2) third party services discovered in the (Inter)net, and 3) (dynamically) synthesized process chains that solve situationspecific tasks, with the synthesis taking place not only at design time, but also at runtime. Key to our approach is the introduction of type-safe stacked second-order execution contexts that allow for higher-order process modeling. Tamed by our underlying strict service-oriented notion of abstraction, this approach is tailored also to be used by application experts with little technical knowledge: users can select, modify, construct and then pass (component) processes during process execution as if they were data. We illustrate the impact and essence of our framework along a concrete, realistic (business) process modeling scenario: the development of Springer's browser-based Online Conference Service (OCS). The most advanced feature of our new framework allows one to combine online synthesis with the integration of the synthesized process into the running application. This ability leads to a particularly flexible way of implementing self-adaption, and to a particularly concise and powerful way of achieving variability not only at design time, but also at runtime. MotivationBusiness process modeling has evolved from mere collection of requirements artifacts, supported by tools like ARIS [45], to an important element in the whole development process of complex applications. With the introduction of execution semantics for BPMN2 [41,2], business process models have started to be used to integrate the application expert in the overall development process. This inclusive trend is however still young and suffers from complicated mechanisms for integrating user-defined or third party activities/services [8,1,44,3,42]. The only exception is the jABC framework, that was designed from the very beginning for easing the integration process and that even offers systematic formal methods-based product line [26] and variability [11] support. On the other hand, in particular AristaFlow [4] promoted ad hoc process modeling as a particularly convenient way for customization. An ad-hoc approach allows users to adapt processes at runtime for a single use, a heuristics that has also successfully been used in [21] Sec. 3.2.3.What is missing to be fully prepared for future demands is a comprehensive, type-safe framework for flexibility, able to capture variability uniformly both at design time and at runtime in a hierarchical fashion. The usefulness of this ad-hoc and context-aware flexibility is illustrated by the following three increasingly demanding route planning scenarios:Static Route Planning: Planning the route before a trip using e.g. google maps gives a selection of nice choices and the option for a detailed investigation, and one is able to 'personalize' the own trip.

show abstract

From ADEPT to AristaFlow BPM Suite: A Research Vision Has Become Reality

Cited by 21 publications

References 1 publication

Business Process Security Analysis – Design Time, Run Time, Audit Time

Business Process Security Analysis – Design Time, Run Time, Audit Time

Towards functional safety and security for adaptive and flexible business processes

Higher-Order Process Modeling: Product-Lining, Variability Modeling and Beyond

Contact Info

Product

Resources

About