Runtime self-monitoring approach of business process compliance in cloud environments

Barnawi, Ahmed; Awad, Ahmed; Elgammal, Amal; Shawi, Radwa El; AL-Ghamdi, Abdullah S. AL-Malaise; Sakr, Sherif

doi:10.1007/s10586-015-0494-0

Cited by 12 publications

(8 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As additional requirements, [4] emphasize the resolution of ambiguities and inconsistencies in the compliance constraint base as well as the efficiency/performance of the CM approach in order to deal with a large volume of events. [6,5,90] cover CMF1 and CMF3 based on process rewriting, anti-patterns, and complex event processing. In addition, the approach supports life cycles ( → CMF5).…”

Section: Findings For CMmentioning

confidence: 99%

Predictive Compliance Monitoring in Process-Aware Information Systems: State of the Art, Functionalities, Research Directions

Rinderle-Ma¹,

Winter²

2022

Preprint

View full text Add to dashboard Cite

Business process compliance is a key area of business process management and aims at ensuring that processes obey to compliance constraints such as regulatory constraints or business rules imposed on them. Process compliance can be checked during process design time based on verification of process models and at runtime based on monitoring the compliance states of running process instances. For existing compliance monitoring approaches it remains unclear whether and how compliance violations can be predicted, although predictions are crucial in order to prepare and take countermeasures in time. This work, hence, analyzes existing literature from compliance and SLA monitoring as well as predictive process monitoring and provides an updated framework of compliance monitoring functionalities. For each compliance monitoring functionality we elicit prediction requirements and analyze their coverage by existing approaches. Based on this analysis, open challenges and research directions for predictive compliance and process monitoring are elaborated.

show abstract

Section: Findings For CMmentioning

confidence: 99%

Predictive Compliance Monitoring in Process-Aware Information Systems: State of the Art, Functionalities, Research Directions

Rinderle-Ma¹,

Winter²

2022

Preprint

View full text Add to dashboard Cite

show abstract

“…This leads, however, to somewhat bloated BPMN models, because much more constructs are used. For instance, Barnawi et al [60] use the expressiveness of BPMN to embed tasks to detect and handle violations of compliance. To enable checking, it is assumed that the process engine provides information such as the completion time of tasks.…”

Section: Existing Work Related To Q2mentioning

confidence: 99%

From event streams to process models and back: Challenges and opportunities

Soffer

Hinze

Koschmider

et al. 2019

Information Systems

View full text Add to dashboard Cite

The domains of complex event processing (CEP) and business process management (BPM) have different origins but for many aspects draw on similar concepts. While specific combinations of BPM and CEP have attracted research attention, resulting in solutions to specific problems, we attempt to take a broad view at the opportunities and challenges involved. We first illustrate these by a detailed example from the logistics domain. We then propose a mapping of this area into four quadrants -two quadrants drawing from CEP to create or extend process models and two quadrants starting $ This paper is an outcome of discussions and collaborations that were initiated at the Dagstuhl seminar 16341 on "Integrating Process-Oriented and Event-Based Systems" from a process model to address how it can guide CEP. Existing literature is reviewed and specific challenges and opportunities are indicated for each of these quadrants. Based on this mapping, we identify challenges and opportunities that recur across quadrants and can be considered as the core issues of this combination. We suggest that addressing these issues in a generic manner would form a sound basis for future applications and advance this area significantly.

show abstract

“…The work presented by Alhamazani et al discussed several monitoring tools developed for the cloud computing environment. However, these tools have mainly focused on monitoring the low level aspects of resources deployed in the cloud (eg, memory, CPU, disk) . Our framework considers the monitoring and compliance of the high level and logical security aspects of the cloud computing business process without relying on any external monitoring component where the entire execution environment is mainly controlled by the cloud providers.…”

Section: Related Workmentioning

confidence: 99%

“…However, these tools have mainly focused on monitoring the low level aspects of resources deployed in the cloud (eg, memory, CPU, disk). 42 Our framework considers the monitoring and compliance of the high level and logical security aspects of the cloud computing business process without relying on any external monitoring component where the entire execution environment is mainly controlled by the cloud providers. CloudWatch 46 is a monitoring service providing comprehensive monitoring for cloud resources and applications run by customers on Amazon Web Services (AWS).…”

Section: Related Workmentioning

confidence: 99%

“…The Monitoring Broker is devised with the support of AOP that separates the business logic of the Web service from its monitoring functionality. Barnawi et al presented a pattern‐based process to embed compliance monitoring logic within the process definition. The approach targets BPMN‐based processes to monitor runtime‐related aspects such as timing and resource assignment constraints.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Security policy monitoring of BPMN‐based service compositions

Asim

Yautsiukhin

Brucker

et al. 2018

J Software Evolu Process

View full text Add to dashboard Cite

Service composition is a key concept of Service‐Oriented Architecture that allows for combining loosely coupled services that are offered and operated by different service providers. Such environments are expected to dynamically respond to changes that may occur at runtime, including changes in the environment and individual services themselves. Therefore, it is crucial to monitor these loosely coupled services throughout their lifetime. In this paper, we present a novel framework for monitoring services at runtime and ensuring that services behave as they have promised. In particular, we focus on monitoring non‐functional properties that are specified within an agreed security contract. The novelty of our work is based on the way in which monitoring information can be combined from multiple dynamic services to automate the monitoring of business processes and proactively report compliance violations. The framework enables monitoring of both atomic and composite services and provides a user friendly interface for specifying the monitoring policy. We provide an information service case study using a real composite service to demonstrate how we achieve compliance monitoring. The transformation of security policy into monitoring rules, which is done automatically, makes our framework more flexible and accurate than existing techniques.

show abstract

Runtime self-monitoring approach of business process compliance in cloud environments

Cited by 12 publications

References 41 publications

Predictive Compliance Monitoring in Process-Aware Information Systems: State of the Art, Functionalities, Research Directions

Predictive Compliance Monitoring in Process-Aware Information Systems: State of the Art, Functionalities, Research Directions

From event streams to process models and back: Challenges and opportunities

Security policy monitoring of BPMN‐based service compositions

Contact Info

Product

Resources

About