Towards a BPMN Security Extension for the Visualization of Cyber Security Requirements

Int. J. Technol. Diffusion Pub Date : 2020-04-01 DOI:10.4018/ijtd.2020040101

M. Chergui, S. Benslimane

{"title":"Towards a BPMN Security Extension for the Visualization of Cyber Security Requirements","authors":"M. Chergui, S. Benslimane","doi":"10.4018/ijtd.2020040101","DOIUrl":null,"url":null,"abstract":"Businessprocessmodelingnotation(BPMN)isawidelyusedbusinessmodelprocess.Theimportance ofsecurityisapparent,buttraditionally,itisconsideredafterthebusinessprocessesdefinition.Thereis aneedforintegratedtoolsandamethodologythatallowsforspecifyingandenforcingcomplianceand securityrequirementsforbusinessprocess-drivenenterprisesystems.Therefore,itisveryimportant tocapturethesecurityrequirementsatconceptualstageinordertoidentifythesecurityneeds.BPMN islackingtheabilitytomodelandpresentsecurityconcepts.Thiswillincreasethevulnerabilityof thesystemandmakethefuturedevelopmentofsecurityforthesystemmoredifficult.Thisarticle proposes a novel extension to BPMN notation based on cyber security ontologies. The authors incorporatevisualconstructsformodelingsecurityrequirements.Inordertoprovideacommonly usableextension,theseenhancementswereimplementedasBPMNmetamodelextension.Theauthors illustratecapabilitiesandbenefitsofextensionwithareal-lifeexample. KEywoRDS BPMN Extension, Business Process, Modeling, Security Requirements","PeriodicalId":208567,"journal":{"name":"Int. J. Technol. Diffusion","volume":"56 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-04-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"5","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Int. J. Technol. Diffusion","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.4018/ijtd.2020040101","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 5

Abstract

Businessprocessmodelingnotation(BPMN)isawidelyusedbusinessmodelprocess.Theimportance ofsecurityisapparent,buttraditionally,itisconsideredafterthebusinessprocessesdefinition.Thereis aneedforintegratedtoolsandamethodologythatallowsforspecifyingandenforcingcomplianceand securityrequirementsforbusinessprocess-drivenenterprisesystems.Therefore,itisveryimportant tocapturethesecurityrequirementsatconceptualstageinordertoidentifythesecurityneeds.BPMN islackingtheabilitytomodelandpresentsecurityconcepts.Thiswillincreasethevulnerabilityof thesystemandmakethefuturedevelopmentofsecurityforthesystemmoredifficult.Thisarticle proposes a novel extension to BPMN notation based on cyber security ontologies. The authors incorporatevisualconstructsformodelingsecurityrequirements.Inordertoprovideacommonly usableextension,theseenhancementswereimplementedasBPMNmetamodelextension.Theauthors illustratecapabilitiesandbenefitsofextensionwithareal-lifeexample. KEywoRDS BPMN Extension, Business Process, Modeling, Security Requirements

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

面向网络安全需求可视化的BPMN安全扩展

Businessprocessmodelingnotation(BPMN)isawidelyusedbusinessmodelprocess。Theimportance ofsecurityisapparent，buttraditionally，itisconsideredafterthebusinessprocessesdefinition。Thereis aneedforintegratedtoolsandamethodologythatallowsforspecifyingandenforcingcomplianceand securityrequirementsforbusinessprocess-drivenenterprisesystems。Therefore，itisveryimportant tocapturethesecurityrequirementsatconceptualstageinordertoidentifythesecurityneeds。BPMN islackingtheabilitytomodelandpresentsecurityconcepts。Thiswillincreasethevulnerabilityof thesystemandmakethefuturedevelopmentofsecurityforthesystemmoredifficult。Thisarticle提出了一个基于网络安全本体的bpmnnotation_的新颖扩展。>作者> incorporatevisualconstructsformodelingsecurityrequirements。Inordertoprovideacommonly usableextension，theseenhancementswereimplementedasBPMNmetamodelextension。Theauthors illustratecapabilitiesandbenefitsofextensionwithareal-lifeexample。关键词:BPMN扩展，业务流程，建模，安全需求

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

Int. J. Technol. Diffusion

自引率

0.00%

发文量