Using patterns for the analysis and resolution of compliance violations

International Journal of Cooperative Information Systems

Volumn 21, Issue 1, 2012, Pages 31-54

  Elgammal, Amal ^a   Turetken, Oktay ^a   Van Den Heuvel, Willem Jan ^a  

^a TILBURG UNIVERSITY   (Netherlands)

Author keywords

compliance constraint detection and prevention; compliance patterns; design time compliance management; formal compliance model; Regulatory compliance; root cause analysis

Indexed keywords

EID: 84858818315     PISSN: 02188430     EISSN: None     Source Type: Journal    
DOI: 10.1142/S0218843012400023     Document Type: Conference Paper

References (37)

1. Basel II: International Convergence of capital measurement and capital standards: A revised framework, Bank for International Settlements (2004).
2. SOX: Sarbanes-Oxley Act, USA Congress (2002).
3. S. Sadiq, G. Governatori and K. Naimiri, Modeling control objectives for business process compliance, in 10th BPM'07 (Australia, 2007), pp. 149-164.
4. A. Elgammal, O. Turetken, W. van den Heuvel and M. Papazoglou, On the formal specification of business contracts and regulatory compliance, in 4th FLACOS (Pisa, Italy, 2010), pp. 33-36.
5. A. Elgammal, O. Turetken, W. van den Heuvel and M. Papazoglou, On the formal specification of regulatory compliance: A comparative analysis, in International Performance Assessment and Auditing in Service Computing Workshop, ICSOC'10 Workshops (USA, 2010).
6. M. Vardi, Branching vs. linear time: Final showdown, in 7th Int. Conf. Tools and Algorithms for the Construction and Analysis of Systems (Italy, 2001), pp. 1-22. (Pubitemid 33254646)
7. A. Pnueli, The temporal logic of programs, in 18th IEEE Symposium on Foundations of Computer Science (Providence, 1977), pp. 46-57.
8. G. Holzmann, The model checker SPIN, IEEE Trans. Softw. Eng. 23 (1997) 279-295. (Pubitemid 127828295)
9. A. Elgammal, O. Turetken, W. van den Heuvel and M. Papazoglou, Root-cause analysis of design-time compliance violations on the basis of property patterns, in 8th ICSOC'10 (USA, 2010), pp. 17-31.
10. H. Dettmer, Goldratt's Theory of Constraints: A systems approach to continuous improvement (ASQC Quality Press, 1997), pp. 62-119.
11. A. Elgammal, O. Turetken, W. van den Heuvel and M. Papazoglou, Towards a comprehensive design-time compliance management: A roadmap, in 15th IBIMA (Egypt, 2010), pp. 1480-1484.
12. Y. Liu, S. Muller and K. Xu, A static compliance-checking framework for business process models, IBM Syst. J. 46 (2007).
13. F. Abouzaid and J. Mullins, A calculus for generation, verification, and refinement of BPEL specifications, Electron. Notes Theor. Comput. Sci. 200 (2008) 43-65. (Pubitemid 351720980)
14. C. Giblin, A. Liu, S. Muller, B. Pfitzmann and X. Zhou, Regulations expressed as logical models, in 18th Int. Conf. Legal Knowledge and Information Systems (Belgium, 2005), pp. 37-48.
15. X. Fu, T. Bultan and J. Su, Analysis of interacting BPEL web services, in WWW'04 (USA, 2004), pp. 621-630. (Pubitemid 40752796)
16. OMG, XML Path Language (XPath) Version 2.0, W3C Recommendation (2007).
17. S. Nakajima, Model-checking behavioral specification of bpel applications, Electron. Notes Theor. Comput. Sci. 151 (2006) 89-105. (Pubitemid 43767027)
18. N. Lohmann, P. Massuthe, C. Stahl and D. Weinberg, Analyzing interacting BPEL processes, in BPM2006 (Austria, 2006), pp. 17-32. (Pubitemid 44568316)
19. O. Turetken, A. Elgammal, W. van den Heuvel and M. Papazoglou, Enforcing compliance on business processes through the use of patterns, in 19th ECIS 2011 (Finland, 2011).
20. ON-THE-FLY, LTL MODEL CHECKING with SPIN, http://spinroot.com/spin/ whatispin.html.
21. Business Process Modeling Notation (BPMN) Specification (2006), http://www. bpmn.org.
22. M. Dwyer, G. Avrunin and J. Corbett, Property specification patterns for finite-state verification, in 2nd Int. Workshop on Formal Methods on Software Practice (USA, 1998), pp. 7-15.
23. X. Fu, T. Bultan and J. Su, WSAT: A tool for formal analysis of web services, in 16th Int. Conf. Computer Aided Verification (USA, 2004), pp. 510-514.
24. Z. Xiangpeng, A. Cerone and P. Krishnan, Verifying BPEL workflows under authorisation constraints, in BPM'06 (Austria, 2006), pp. 439-444. (Pubitemid 44568349)
25. C. Wolter and A. Schaad, Modeling of task-based authorization constraints in BPMN, in BPM'07 (Australia, 2007), pp. 64-79.
26. A. Awad, M. Weidlich and M. Weske, Specification, Verification and explanation of violation for data aware compliance rules, in 7th Int. Conf. Service Oriented Computing (ICSOC-Service Wave'09) (2009), pp. 500-515.
27. S. Halle, R. Villemaire and O. Cherkaoui, Specifying and validating data-aware temporal web service properties, IEEE Trans. Softw. Eng. 35 (2009) 669-683.
28. J. Yu, Y. Han, J. Han, Y. Jin, P. Falcarin and M. Morisio, Synthesizing service composition models on the basis of temporal business rules, J. Comput. Sci. Technol. 23 (2008) 885-894.
29. J. Yu, T. Manh, J. Han and Y. Jin, Pattern-based property specification and verification for service composition, in 7th Int. Conf. Web Information Systems Engineering (WISE06) (China, 2006), pp. 156-168. (Pubitemid 44860413)
30. G. Governatori, Z. Milosevic and S. Sadiq, Compliance checking between business processes and business contracts, in 10th Int. Enterprise Distributed Object Computing Conf. (EDOC 2006) (Hong Kong, 2006), pp. 221-232.
31. G. Governatori and A. Rotolo, Justice delayed is justice denied: Logics for a temporal account of reparations and legal compliance, in Conference Justice Delayed Is Justice Denied: Logics for a Temporal Account of Reparations and Legal Compliance (2011), pp. 364-382.
32. G. Ahn, R. Sandhu, M. Kang and J. Park, Injecting RBAC to secure a Web-based workflow system, in Proc. 5th ACM Workshop on Role-Based Access Control (2000), pp. 1-10.
33. C. Wolter, P. Miseldine and C. Meinel, Verification of business process entailment constraints using SPIN, in ESSoS'09 (Belgium, 2009), pp. 1-15.
34. A. Ghose and G. Koliadis, Auditing business process Compliance, in 5th Int. Conf. Service-Oriented Computing (ICSOC'07) (Austria, 2007), pp. 169-180.
35. A. Awad, S. Smirnov and M. Weske, Resolution of compliance violation in business process models: A planning-based approach, in OTM Conferences (Portugal, 2009), pp. 6-23.
36. R. Lu, S. Sadiq and G. Governatori, Measurement of compliance distance in business processes, Inf. Syst. Manage. 25 (2008) 344-355.
37. H. Post, C. Sinz, A. Kaiser and T. Gorges, Reducing false positives by combining abstract interpretation and bounded model checking, in ASE'08 (2008).