Extension of a methodology for risk-aware business process modeling and simulation enabling process-oriented incident handling support

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn , Issue , 2008, Pages 48-55

  Tjoa, Simon ^a   Jakoubi, Stefan ^a   Goluch, Gernot ^a   Quirchmayrt, Gerald ^b  

^a Secure Business Austria   (Austria)

^b UNIVERSITY OF VIENNA   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

DECENTRALIZED CONTROL; ENTERPRISE RESOURCE MANAGEMENT; SECURITY OF DATA; STANDARDS;

BUSINESS PROCESS MANAGEMENT; BUSINESS PROCESS MODELING; BUSINESS PROCESSES; COMPUTER SECURITY; INFORMATION NETWORKING; INTERNATIONAL CONFERENCES; ORIENTED PROCESS; PROCESS-ORIENTED;

PROCESS ENGINEERING;

EID: 50349099846     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2008.81     Document Type: Conference Paper

References (24)

1. PricewaterhouseCoopers and DTI, "Information Security Breaches Survey," http://www.pwc.com/uk/eng/ins-sol/publ/pwc_dti- fullsurveyresults06.pdf, 2006.
2. Australian Computer Emergency Response Team, "Australian Computer Crime and Security Survey." http://www.auscert.org.au/render.html?it= 2001&template=1, 2006, accessed 08/2007. [Online]. Available: http://www.auscert.org.au/render.html?it=2001
3. CSI/FBI, "CSI/FBI Computer Crime and Security Survey," 2006.
4. BSI (Federal Office for Information Security), "IT-Grundschutz Manual (english version)." 2004. [Online]. Available: http://www.bsi.de/ english/gshb/manual/download/index.html
5. National Institute of Standards and Technology, "Nist sp800-61: Computer security incident handling guide," 2004. [Online]. Available: http://csrc.nist.gov/publications/nistpubs/
6. M. J. West-Brown, D. Stikvoort. and K.-P. Kossakowski, "Hand-book for computer security incident response teams (csirts)," Carnegie Melon University / Software Engineering Institute, December 1998.
7. A. W. Scheer, G. Keller, and M. Nüttgens, "Semantische Prozeß-modellierung auf der Grundlage Ereignisgesteuerter Prozeßketten (EPK)." Veröffentlichungen des Instituts für Wirtschaftsinformatik, Heft 89. Saarbrücken, 1992. [Online]. Available: http://www.iwi.uni-sb.de/nuettgens/Veroef/Artikel/heft089/heft089.pdf
8. D. Karagiannis, S. Junginger. and R. Strobl, Business Process Modelling. Springer, Berlin. 1996, eh. Introduction to Business Process Management Systems Concepts, pp. 81-106.
9. BOC, "Business process management systems (bpms) paradigm," 2007. [Online]. Available: http://www.boc-eu.com/jumpto.jsp?goto=BPMS\&lg=en
10. S. Jakoubi, S. Tjoa. and G. Quirchmayr, "ROPE: A Methodology for Enabling the Risk-Aware Modelling and Simulation of Business Processes." in ECIS, 15th European Conference on Information Systems, 2007.
11. Business Continuity Institute, "Good Practice Guidelines," http://www.thebci.org/gpgdownloadpage.htm, 2005. [Online]. Available: http://www.thebci.org
12. _, "Good Practice Guidelines," http://www.thebci.org/ gpgdownloadpage.htm, 2007. [Online]. Available: http://www.thebci.org
13. British Standards Institute, "Bs 25999," http://www.bsonline. bsiglobal.com/server/index.jsp, 2006.
14. CERT, "OCTAVE," 2005. [Online]. Available: http://www.cert.org/ octave
15. International Organization for Standardization and International Electrotechnical Commission, "ISO/IEC 13335-2:1997 Techniques for information and communications technology security risk management," http://www.iso.org/, 1997.
16. _, "ISO/IEC 17799:2005 Information technology - Security techniques - Code of practice for information security management," http://www.iso.org/, 2006.
17. _, "ISO/IEC 27001:2005, information technology - security techniques - information security management systems- requirements," http://www.iso.org/, 2005.
18. ISC2, Official (ISC)2 Guide to the CISSP CBK. Auerbach Publications, 2007.
19. DePaul University - Information Security Team. "A framework for incident response (draft)," DePaul University (https://infosec.depaul.edu/) , December 2002. [Online]. Available: http://is.depaul.edu/\_downloads/6\
20. S. Mitropoulos, D. Patsos, and C. Douligeris, "On incident handling and response: A state-of-the-art approach." Elsevier - Computer & Security, vol. 25, pp. 351-370, 2006.
21. Office of Management and Budget, "Circular no. a-130," White House (http://www.whitehouse.gov/omb/circulars/a130/a130trans4.html). [Online]. Available: http://www.whitehouse.gov/onib/circulars/a130/a130trans4.html
22. US States Code, "Chapter 35 of title 44, subchapter iii - information security," Federal Information Security Management Act (FISMA), 2002.
23. BSI (Federal Office for Information Security), "BSI Standardsl (english version)," 2007. [Online]. Available: http://www.bsi.bund.de/ english/publications/bsi\_standards/index.htm
24. J. Sinur and J. Thompson. "The business process management scenario," Gartner Research ID Number: AV-20-0932, 2003.