Conceptual model for online auditing

Decision Support Systems

Volumn 50, Issue 3, 2011, Pages 636-647

  Van Der Aalst, Wil ^a   Van Hee, Kees ^a   Van Der Werf, Jan Martijn ^a   Kumar, Akhil ^b   Verdonk, Marc ^c  

^a EINDHOVEN UNIVERSITY OF TECHNOLOGY   (Netherlands)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

^c NONE

Author keywords

Architecture; Auditing; Business rules; Conceptual model; Conformance checking; Constraints; Information assurance

Indexed keywords

AUDITING; BUSINESS RULES; CONCEPTUAL MODEL; CONFORMANCE CHECKING; CONSTRAINTS; INFORMATION ASSURANCE;

CONCEPTUAL DESIGN; INFORMATION SYSTEMS; NETWORK ARCHITECTURE; ONLINE SYSTEMS;

MODEL CHECKING;

EID: 78651086490     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2010.08.014     Document Type: Article

References (36)

1. W.M.P. van der Aalst Using process mining to generate accurate and interactive business process maps BIS 2009 Workshops vol. 37 of LNBIP 2009 Springer 1 14
2. W.M.P. van der Aalst, and K.M. van Hee Workflow Management: Models, Methods and Systems 2002 The MIT press Cambridge, Massachusetts
3. W.M.P. van der Aalst, B.F. van Dongen, J. Herbst, L. Maruster, G. Schimm, and A.J.M.M. Weijters Workflow mining: a survey of issues and approaches Data & Knowledge Engineering 47 2 2003 237 267
4. W.M.P. van der Aalst, A. Weijters, and L. Maruster Workflow mining: discovering process models from event logs IEEE Transactions on Knowledge and Data Engineering 16 9 2004 1128 1142
5. W.M.P. van der Aalst, H. Beer, and B. Dongen Process mining and verification of properties: an approach based on temporal logic CoopIS 2005, No. 3760 in LNCS 2005 Springer 130 147
6. W.M.P. van der Aalst, and B.F. van Dongen ProM 4.0: comprehensive support for real process analysis ICATPN 2007 vol. 4546 of LNCS 2007 Springer 484 494
7. R. Agrawal, D. Gunopulos, and F. Leymann Mining process models from workflow logs Sixth International Conference on Extending Database Technology 1998 469 483
8. G. Antoniou, N. Dimaresis, and G. Governatori A system for modal and deontic defeasible reasoning AI 2007: Advances in Artificial Intelligence, No. 4830 in LNCS 2007 Springer 609 613
9. A. Basu, and R.W. Blanning A formal approach to workflow analysis Information System Research 11 1 2000 17 36
10. D. Berg, Turning Sarbanes-Oxley projects into strategic business processes, Sarbanes-Oxley Compliance Journal (2004).
11. E. Bertino, E. Ferrari, and V. Atluri The specification and enforcement of authorization constraints in workflow management systems ACM Transactions on Information and System Security 2 1 1999 65 104
12. R.A. Botha, and J.H.P. Eloff Separation of duties for access control enforcement in workflow environments IBM Systems Journal 40 3 2001 666 682
13. K. Chari, and J. Perols An AI-based approach for procurement fraud detection Proceedings of the Workshop on Information Technologies and Systems 2005
14. P.P. Chen The entity-relationship model: towards a unified view of data ACM Transactions on Database Systems 1 1976 9 36
15. Committee of Sponsoring Organizations Internal Control-Integrated Framework URL http://www.coso.org/publications/ executivesummaryintegratedframework.htm
16. J.E. Cook, and A.L. Wolf Software process validation: quantitatively measuring the correspondence of a process to a model ACM Transactions on Software Engineering and Methodology 8 2 1999 147 176
17. B.F. van Dongen, R.M. Dijkman, and J. Mendling Measuring similarity between business process models CAiSE 2008 450 464
18. S. Goedertier, and J. Vanthienen Declarative process modeling with business vocabulary and business rules OTM 2007 Workshops, No. 4805 in LNCS 2007 Springer 603 612
19. S. Goedertier, C. Mues, and J. Vanthienen Specifying process-aware access control rules in SBVR Advances in Rule Interchange and Applications, No. 4824 in LNCS 2007 Springer 39 52
20. S. Goedertier, D. Martens, B. Baesens, R. Haesen, and J. Vanthienen Process mining as first-order classification learning on logs with negative events BPM 2007 Workshops vol. 4928 of LNCS 2008 Springer 42 53
21. G. Governatori, and Z. Milosevic A formal analysis of a business contract language International Journal of Cooperative Information Systems 15 4 2006 659 685
22. S. Green Manager's Guide to the Sarbanes-Oxley Act: Improving Internal Controls to Prevent Fraud 2004 Wiley
23. D.A. Haworth, and L.R. Pietron Sarbanes-Oxley: achieving compliance by starting with ISO 17799 Information Systems Management 23 1 2006 73 87
24. D.R. Kuhn Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems RBAC 97 1997 ACM New York, NY, USA 23 30
25. A. Kumar, J.L. Zhao, Dynamic routing and operational controls in workflow management systems, Management Science 45 (2) (1999).
26. P.F. Linington, Z. Milosevic, J. Cole, S. Gibson, S. Kulkarni, and S. Neal A unified behavioural model and a contract language for extended enterprise Data & Knowledge Engineering 51 1 2004 5 29
27. D.-R. Liu, M.-Y. Wu, and S.-T. Lee Role-based authorizations for workflow systems in support of task-based separation of duty The Journal of Systems and Software 73 3 2004 375 387
28. D. Nute Defeasible logic, handbook of logic in artificial intelligence and logic programming Nonmonotonic Reasoning and Uncertain Reasoning vol. 3 1994 353 395
29. J. Paredaens, P. De Bra, M. Gyssens, and D. van Gucht The Structure of the Relational Database Model 1989 Springer-Verlag New York, Inc. New York, NY, USA
30. A. Rozinat, and W.M.P. van der Aalst Conformance testing: measuring the fit and appropriateness of event logs and process models BPM 2005 Workshops vol. 3812 of LNCS 2006 Springer 163 176
31. A. Rozinat, and W.M.P. van der Aalst Conformance checking of processes based on monitoring real behavior Information Systems 33 1 2008 64 95
32. S. Sadiq, G. Governatori, and K. Namiri Modeling control objectives for business process compliance Business Process Management, No. 4714 in LNCS 2007 Springer 149 164
33. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman Role-based access control models IEEE Computer 29 2 1996 38 47
34. H. Schonenberg, B. Weber, B.F. van Dongen, and W.M.P. van der Aalst Supporting flexible processes through recommendations based on history BPM 2008 vol. 5240 of LNCS 2008 Springer 51 66
35. R.T. Simon, and M.E. Zurko Separation of duty in role-based environments, Computer Security Foundations Workshop, 1997 Proceedings., 10th 1997 183 194
36. J. Wainer, A. Kumar, and P. Barthelmess DW-RBAC: a formal security model of delegation and revocation in workflow systems Information Systems 32 3 2007 365 384