A Formal Approach Enabling Risk-Aware Business Process Modeling and Simulation

Authors:
Simon Tjoa;Stefan Jakoubi;Gernot Goluch;Gerhard Kitzler;Sigrun Goluch;Gerald Quirchmayr
Affiliations:
St. Pölten University of Applied Sciences, St. Pölten;Austrian IT-Security Competence Center, Secure Business Austria, Vienna;Austrian IT-Security Competence Center, Secure Business Austria, Vienna;Austrian IT-Security Competence Center, Secure Business Austria, Vienna;Austrian IT-Security Competence Center, Secure Business Austria, Vienna;University of Vienna, Vienna
Venue:
IEEE Transactions on Services Computing
Year:
2011

Citing 0
Cited 1

Business driven BCM SLA translation for service oriented systems

MMB'12/DFT'12 Proceedings of the 16th international GI/ITG conference on Measurement, Modelling, and Evaluation of Computing Systems and Dependability and Fault Tolerance

Quantified Score

Hi-index	0.00

Visualization

Abstract

The effective, efficient and continuous execution of business processes is crucial for meeting entrepreneurial goals. Business process modeling and simulation are used to enable desired business process optimizations. However, current approaches mainly focus on economic aspects while security aspects are dealt with in separate initiatives. This missing interconnection may lead to significant differences in improvement suggestions, such as the differing valuation of security investments (e.g., redundancy of systems). The major contribution of this paper is the introduction of a formal model that is capable of expressing the relations between threats, detection mechanisms, safeguards, recovery measures and their effects on business processes. This novel business process simulation capability paves the way for the evaluation of security investments at process design stage by allowing the consideration of stochastic influences of the occurrence of threats on process activities and resources in a unified way. A stylized business case outlines how our method can be applied to real world scenarios.