A BPMN Extension for the Modeling of Security Requirements in Business Processes

  • Authors:

  • Alfonso Rodríguez;Eduardo Fernández-Medina;Mario Piattini

  • Affiliations:

  • The author is with the Departamento de Auditoría e Informática, Universidad del Bio Bio, Chillán, Chile. E-mail: alrodriguez@inf-cr.uclm.es,;The authors are with the ALARCOS Research Group, UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Ciudad Real, Spain.;The authors are with the ALARCOS Research Group, UCLM-Soluziona Research and Development Institute, University of Castilla-La Mancha, Ciudad Real, Spain.

  • Venue:
  • IEICE - Transactions on Information and Systems
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Business Processes are considered a crucial issue by many enterprises because they are the key to maintain competitiveness. Moreover, business processes are important for software developers, since they can capture from them the necessary requirements for software design and creation. Besides, business process modeling is the center for conducting and improving how the business is operated. Security is important for business performance, but traditionally, it is considered after the business processes definition. Empirical studies show that, at the business process level, customers, end users, and business analysts are able to express their security needs. In this work, we will present a proposal aimed at integrating security requirements through business process modeling. We will summarize our Business Process Modeling Notation extension for modeling secure business process through Business Process Diagrams, and we will apply this approach to a typical health-care business process.