Enhancing the ArchiMate® standard with a responsibility modeling language for access rights management

Authors:
Christophe Feltus;Eric Dubois;Erik Proper;Iver Band;Michaël Petit
Affiliations:
Public Research Centre Henri Tudor, Luxembourg;Public Research Centre Henri Tudor, Luxembourg;Public Research Centre Henri Tudor, Luxembourg;Standard Insurance Company, Portland, Oregon;University of Namur, Belgium
Venue:
Proceedings of the Fifth International Conference on Security of Information and Networks
Year:
2012

Citing 5
Cited 2

Telos: representing knowledge about information systems

ACM Transactions on Information Systems (TOIS)
Some Methodological Clues for Defining a Unified Enterprise Modelling Language

ICEIMT '01 Proceedings of the IFIP TC5/WG5.12 International Conference on Enterprise Integration and Modeling Technique: Enterprise Inter- and Intra-Organizational Integration: Building International Consensus
Strengthening employee's responsibility to enhance governance of IT: COBIT RACI chart case study

Proceedings of the first ACM workshop on Information security governance
Adding Attributes to Role-Based Access Control

Computer
A contextual attribute-based access control model

OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part II

Conviction model for incident reaction architecture monitoring based on automatic sensors alert detection

Proceedings of the 6th International Conference on Security of Information and Networks
Metamodel for reputation based agents system: case study for electrical distribution SCADA design

Proceedings of the 6th International Conference on Security of Information and Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we describe an innovative approach for aligning the business layer and the application layer of ArchiMate to ensure that applications manage access rights consistently with enterprise goals and risk tolerances. The alignment is realized by using the responsibility of the employees, which we model using ReMoLa. The main focus of the alignment targets the definition and the assignment of the access rights needed by the employees according to business specification. The approach is illustrated and validated with a case study in a municipal hospital in Luxembourg.