Abstract
Business process definition and analysis are an important activity for any organisation. As research has demonstrated, well-defined business processes can reduce cost, improve productivity and provide organisations with competitive advantages. In the last few years, the need to ensure the security of business processes has been identified as a major research challenge. Limited security expertise of business process developers together with a clear lack of appropriate methods and techniques to support the security analysis of business processes is important prohibitors to providing answers to that research challenge. This paper introduces the first attempt in the literature to produce a novel pattern-based approach to support the design and analysis of secure business processes. Our work draws on elements from the security requirements engineering area and the security patterns area, combined with business process modelling, and it produces a set of process-level security patterns which are used to implement security in a given business process model. Such an approach advances the existing literature by providing a structured way of operationalising security at the business process level of abstraction. The applicability of the work is illustrated through an application to a real-life information system, and the effectiveness and usability of the work are evaluated via a workshop-based experiment. The evaluation clearly indicates that non-experts are able to comprehend and utilise the developed patterns to construct secure business process designs.
| Original language | English |
|---|---|
| Pages (from-to) | 1-23 |
| Journal | Software and Systems Modeling |
| DOIs | |
| Publication status | Published - 13 Jul 2019 |
Fingerprint
Keywords
- Business process modelling
- Business process security
- Security process patterns
- Security requirements engineering
Cite this
}
Enhancing secure business process design with security process patterns. / Argyropoulos, Nikolaos; Mouratidis, Haralambos; Fish, Andrew.
In: Software and Systems Modeling, 13.07.2019, p. 1-23.Research output: Contribution to journal › Article
TY - JOUR
T1 - Enhancing secure business process design with security process patterns
AU - Argyropoulos, Nikolaos
AU - Mouratidis, Haralambos
AU - Fish, Andrew
PY - 2019/7/13
Y1 - 2019/7/13
N2 - Business process definition and analysis are an important activity for any organisation. As research has demonstrated, well-defined business processes can reduce cost, improve productivity and provide organisations with competitive advantages. In the last few years, the need to ensure the security of business processes has been identified as a major research challenge. Limited security expertise of business process developers together with a clear lack of appropriate methods and techniques to support the security analysis of business processes is important prohibitors to providing answers to that research challenge. This paper introduces the first attempt in the literature to produce a novel pattern-based approach to support the design and analysis of secure business processes. Our work draws on elements from the security requirements engineering area and the security patterns area, combined with business process modelling, and it produces a set of process-level security patterns which are used to implement security in a given business process model. Such an approach advances the existing literature by providing a structured way of operationalising security at the business process level of abstraction. The applicability of the work is illustrated through an application to a real-life information system, and the effectiveness and usability of the work are evaluated via a workshop-based experiment. The evaluation clearly indicates that non-experts are able to comprehend and utilise the developed patterns to construct secure business process designs.
AB - Business process definition and analysis are an important activity for any organisation. As research has demonstrated, well-defined business processes can reduce cost, improve productivity and provide organisations with competitive advantages. In the last few years, the need to ensure the security of business processes has been identified as a major research challenge. Limited security expertise of business process developers together with a clear lack of appropriate methods and techniques to support the security analysis of business processes is important prohibitors to providing answers to that research challenge. This paper introduces the first attempt in the literature to produce a novel pattern-based approach to support the design and analysis of secure business processes. Our work draws on elements from the security requirements engineering area and the security patterns area, combined with business process modelling, and it produces a set of process-level security patterns which are used to implement security in a given business process model. Such an approach advances the existing literature by providing a structured way of operationalising security at the business process level of abstraction. The applicability of the work is illustrated through an application to a real-life information system, and the effectiveness and usability of the work are evaluated via a workshop-based experiment. The evaluation clearly indicates that non-experts are able to comprehend and utilise the developed patterns to construct secure business process designs.
KW - Business process modelling
KW - Business process security
KW - Security process patterns
KW - Security requirements engineering
UR - http://www.scopus.com/inward/record.url?scp=85068966252&partnerID=8YFLogxK
U2 - 10.1007/s10270-019-00743-y
DO - 10.1007/s10270-019-00743-y
M3 - Article
AN - SCOPUS:85068966252
SP - 1
EP - 23
JO - Software and Systems Modeling
JF - Software and Systems Modeling
SN - 1619-1366
ER -