OPBUS: A framework for improving the dependability of risk-aware business processes

Varela-Vaca, Ángel Jesús

doi:10.3233/aic-140651

Cited by 7 publications

(12 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In [74,75], the OPBUS (OPtimization of BUsiness process Security) framework for security-quality requirements in business processes management is proposed. OPBUS includes security issues from design to execution stage of the BPM lifecycle.…”

Section: R-bpm Approaches With Multiple Viewpointsmentioning

confidence: 99%

Risk-aware business process management using multi-view modeling: method and tool

et al. 2021

View full text Add to dashboard Cite

Risk-aware Business Process Management (R-BPM) has been addressed in research since more than a decade. However, the integration of the two independent research streams is still ongoing with a lack of research focusing on the conceptual modeling perspective. Such an integration results in an increased meta-model complexity and a higher entry barrier for modelers in creating conceptual models and for addressees of the models in comprehending them. Multi-view modeling can reduce this complexity by providing multiple interdependent viewpoints that, all together, represent a complex system. Each viewpoint only covers those concepts that are necessary to separate the different concerns of stakeholders. However, adopting multi-view modeling discloses a number of challenges particularly related to managing consistency which is threatened by semantic and syntactic overlaps between the viewpoints. Moreover, usability and efficiency of multi-view modeling have never been systematically evaluated. This paper reports on the conceptualization, implementation, and empirical evaluation of e-BPRIM, a multi-view modeling extension of the Business Process-Risk Management-Integrated Method (BPRIM). The findings of our research contribute to theory by showing, that multi-view modeling outperforms diagram-oriented modeling by means of usability and efficiency of modeling, and quality of models. Moreover, the developed modeling tool is openly available, allowing its adoption and use in R-BPM practice. Eventually, the detailed presentation of the conceptualization serves as a blueprint for other researchers aiming to harness multi-view modeling.

show abstract

Section: R-bpm Approaches With Multiple Viewpointsmentioning

confidence: 99%

Risk-aware business process management using multi-view modeling: method and tool

et al. 2021

View full text Add to dashboard Cite

show abstract

“…The works in [101], [102] introduce OPBUS, a risk-aware business process modelling framework. The architecture of OPBUS is layered with the first layer revolving around process modelling, using BPMN with textual annotations capturing risk information.…”

Section: Risk Management At Business Process Modelsmentioning

confidence: 99%

Implementation and Design of Secure Business Process Models Based on Organisational Goals

Patrick

2022

Preprint

View full text Add to dashboard Cite

Business processes are essential instruments used for the coordination of organisational activities in order to produce value in the form of products and services. Information security is an important non-functional characteristic of business processes due to the involvement of sensitive data exchanged between their participants. Therefore, potential security shortfalls can severely impact organisational reputation, customer trust and cause compliance issues. Nevertheless, despite its importance, security is often considered as a technical concern and treated as an afterthought during the design of information systems and the business processes which they support. The consideration of security during the early design stages of information systems is highly beneficial. Goal-oriented security requirements engineering ap- proaches can contribute to the early elicitation of system requirements at a high level of abstraction and capture the organisational context and rationale behind design choices. Aligning such requirements with process activities at the operational level augments the traceability between system models of different abstraction levels and leads to more robust and context-aware operationalisations of security. Therefore, there needs to be a well-defined and verifiable interconnection between a system’s security requirements and its business process models. This work introduces a framework for the design of secure business process models. It uses security-oriented goal models as its starting point to capture a socio-technical view of the system to-be and its security requirements during its early design stages. Concept mappings and model transformation rules are also introduced as a structured way of extracting business process skeletons from such goal models, in order to facilitate the alignment between the two different levels of abstraction. The extracted business process skeletons, are refined to complete business process models through the use of a set of security patterns, which standardise proven solutions to recurring security problems. Finally, the framework also offers security verification capabilities of the produced process models through the introduction of security-related attributes and model checking algorithms. Evaluation of this work is performed: (i) through individual evaluation of its components via their application in real-life systems, (ii) a workshop-based modelling exercise where participants used and evaluated parts of the framework and (iii) a case study from the public administration domain where the overall framework was applied in cooperation with stakeholders of the studied system. The evaluation indicated that the developed framework provides a structured approach which supports stakeholders in designing and evaluating secure business process models.

show abstract

“…The implemented tool (called OPBUS-Risk) is an extension of OPBUS [35], an Eclipse plug-in based on modeldriven architecture technologies that integrates (1) a business process modeler that supports the specification of the extension presented in Section IV; (2) a transformation engine that enables business process models extended with risk information to be translated into CSP and COP models;…”

Section: Toolingmentioning

confidence: 99%

Automatic Verification and Diagnosis of Security Risk Assessments in Business Process Models

et al. 2019

View full text Add to dashboard Cite

show abstract

OPBUS: A framework for improving the dependability of risk-aware business processes

Cited by 7 publications

References 5 publications

Risk-aware business process management using multi-view modeling: method and tool

Risk-aware business process management using multi-view modeling: method and tool

Implementation and Design of Secure Business Process Models Based on Organisational Goals

Automatic Verification and Diagnosis of Security Risk Assessments in Business Process Models

Contact Info

Product

Resources

About