JISBD2007-05: Secure business processes defined through a UML 2.0 extension

IEEE Latin America Transactions

Volumn 6, Issue 4, 2008, Pages 339-346

  Rodríguez, Alfonso ^a   Fernández Medina, Eduardo ^b,c   Piattini, Mario ^a   Trujillo, Juan ^c  

^a UNIVERSIDAD DEL BÍO BÍO   (Chile)

^b UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^c UNIVERSITY OF ALICANTE   (Spain)

Author keywords

Activity Diagram; Business Process; Object Constraint Language (OCL); Security Requirement; Unified Modeling Language (UML)

Indexed keywords

ACTIVITY DIAGRAM; BUSINESS PROCESS; OBJECT CONSTRAINT LANGUAGE; SECURITY REQUIREMENTS; UNIFIED MODELING;

COMPETITION; SOFTWARE ENGINEERING;

UNIFIED MODELING LANGUAGE;

EID: 78649301359     PISSN: 15480992     EISSN: None     Source Type: Journal    
DOI: 10.1109/TLA.2008.4815287     Document Type: Conference Paper

References (27)

1. Eriksson, H.-E. and Penker, M., Business Modeling with UML, OMG Press. (2001).
2. Lonjon, A.; Business Process Modeling and Standardization, BPTrends. In http://www.bptrends.com/. (2004).
3. Object Management Group; Unified Modeling Language: Superstructure, version 2.0, formal/05-07-04. In http://www.omg.org/docs/formal/05-07-04.pdf. (2005).
4. BPMN; Business Process Modeling Notation Specification, OMG Final Adopted Specification, dtc/06-02-01. In http://www.bpmn.org/Documents/ OMG%20Final%20Adopted%20BP MN%201-0%20Spec%2006-02-01.pdf. (2006).
5. Object Management Group; MDA Guide Version 1.0.1. In http://www.omg.org/ docs/omg/03-06-01.pdf. (2003).
6. Backes, M., Pfitzmann, B. and Waider, M.; Security in Business Process Engineering, International Conference on Business Process Management (BPM). Vol. 2678, LNCS. Eindhoven, Netherlands. (2003). pp.168-183.
7. Herrmann, G. and Pernul, G.; Viewing Business Process Security from Different Perspectives, 11th International Bled Electronic Commerce Conference. Slovenia. (1998). pp.89-103.
8. Firesmith, D.; Engineering Security Requirements, Journal of Object Technology. Vol. 2 (1), January-February. (2003). pp.53-68.
9. Firesmith, D.; Specifying Reusable Security Requirements, Journal of Object Technology. Vol. 3 (1), January-February. (2004). pp.61-75.
10. Rodríguez, A., Fernández-Medina, E. and Piattini, M.; Hacia la definición de un perfil de UML 2.0 para modelar requisitos de seguridad en procesos de negocio, XI Jornadas de Ingeniería del Software y Bases de Datos. Sitges, España. (2006). pp.347-356.
11. Rational Software, Rational Unified Process, Best Practices for Software Development Teams, (2001). p.21, Jacobson, I., Booch, G. and Rumbaugh, J., The Unified Software Development Process, (1999). 463 p.
12. Herrmann, P. and Herrmann, G.; Security requirement analysis of business processes, Electronic Commerce Research. Vol. 6 (3-4). (2006). pp.305-335,
13. Röhm, A. W., Herrmann, G. and Pernul, G.; A Language for Modelling Secure Business Transactions, 15th. Annual Computer Security Applications Conference. Phoenix, Arizona. (1999). pp.22-31.
14. Maña, A., Montenegro, J. A., Rudolph, C. and Vivas, J. L.; A business process-driven approach to security engineering, 14th. International Workshop on Database and Expert Systems Applications (DEXA). Prague, Czech Republic. (2003). pp.477-481,
15. Vivas, J. L., Montenegro, J. A. and Lopez, J.; Towards a Business Process-Driven Framework for security Engineering with the UML, Information Security: 6th International Conference, ISC. Bristol, U.K. (2003). pp.381-395.
16. List, B. and Korherr, B.; A UML 2 Profile for Business Process Modelling, 1st International Workshop on Best Practices of UML (BP-UML) at ER-Conference. Klagenfurt, Austria. (2005).
17. Korherr, B. and List, B.; Extending the UML 2 Activity Diagram with Business Process Goals and Performance Measures and the Mapping to BPEL, 2nd International Workshop on Best Practices of UML (BP-UML) at ER Conference. Tucson, Arizona, USA. (2006). pp.7-18.
18. Stefanov, V., List, B. and Korherr, B.; Extending UML 2 Activity Diagrams with Business Intelligence Objects, 7th International Conference on Data Warehousing and Knowledge Discovery (DaWaK2005). Copenhagen, Denmark. (2005).
19. Kalnins, A., Barzdins, J. and Celms, E.; UML Business Modeling Profile, Thirteenth International Conference on Information Systems Development, Advances in Theory, Practice and Education. Vilnius, Lithuania. (2004). pp.182-194.
20. Vitolins, V. and Kalnins, A.; Semantics of UML 2.0 Activity Diagram for Business Modeling by Means of Virtual Machine, Ninth IEEE International Enterprise Distributed Object Computing Conference (EDOC). Enschede, The Netherlands. (2005). pp.181-194.
21. Harmon, P.; The OMG's Model Driven Architecture and BPM. Business Process Trends, Vol. 2 (5). In http://www.bptrends.com/publicationfiles/ 05%2D04%20NL%20MDA %20and%20BPM%2Epdf. (2004).
22. Podeswa, H., B.O.O.M.: Business Object-Oriented Modeling for Business Analysts, Thomson Course Technology Incorporated, (2005). 401 p.
23. Object Management Group; Unified Modeling Language: Superstructure Version 2.1.1 (formal/2007-02-05). In http://www.omg.org/docs/formal/07-02-05. pdf. (2007).
24. Object Management Group; OCL 2.0 Specification, Version 2.0. In http://www.omg.org/docs/ptc/05-06-06.pdf. (2005).
25. Haley, C. B., Laney, R. C. and Nuseibeh, B.; Deriving security requirements from crosscutting threat descriptions, 3rd International Conference on Aspect-Oriented Software Development (AOSD). Lancaster, UK. (2004). pp.112-121.
26. Lampson, B. W.; Computer Security in the Real World, IEEE Computer. Vol. 37 (6). (2004). pp.37-46.
27. Atluri, V.; Security for Workflow Systems, Information Security Technical Report. Vol. 6 (2). (2001). pp.59-68.