Modeling process-related duties with extended UML activity and interaction diagrams

Electronic Communications of the EASST

Volumn 37, Issue , 2011, Pages

  Schefer, Sigrid ^a   Strembeck, Mark ^a  

^a VIENNA UNIVERSITY OF ECONOMICS AND BUSINESS   (Austria)

Author keywords

Business processes; Compliance management; Duties; UML

Indexed keywords

EID: 85035684204     PISSN: None     EISSN: 18632122     Source Type: Journal    
DOI: 10.14279/tuj.eceasst.37.481.560     Document Type: Article

References (28)

1. W. M. P. van der Aalst, M. Rosemann, M. Dumas. Deadline-based escalation in process-aware information systems. Decision Support Systems 43(2), 2007
2. G. Ahn, R. Sandhu. Role-based Authorization Constraints Specification. ACM Transactions on Information and System Security (TISSEC) 3(4), November 2000
3. R. A. Botha, J. H. Eloff. Separation of duties for access control enforcement in workflow environments. IBM Systems Journal 40(3), 2001
4. J. Cannon, M. Byers. Compliance Deconstructed. ACM Queue 4(7), September 2006
5. J. Cole, J. Derrick, Z. Milosevic, K. Raymond. Author Obliged to Submit Paper before 4 July: Policies in an Enterprise Specification. In Proceedings of the International Workshop on Policies for Distributed Systems and Networks. 2001
6. M. Damianides. How does SOX change IT? Journal of Corporate Accounting & Finance 15(6), September/October 2004
7. R. Dömges, K. Pohl. Adapting traceability environments to project-specific needs. Communications of the ACM 41(12), 1998
8. A. Forster, G. Engels, T. Schattkowsky, R. Van Der Straeten. Verification of Business Process Quality Constraints Based on Visual Process Patterns. In Proceedings of the First Joint IEEE/IFIP Symposium on Theoretical Aspects of Software Engineering. IEEE Computer Society, 2007
9. O. C. Z. Gotel, A. C. Finkelstein. An analysis of the requirements traceability problem. In Proceedings of 1st International Conference on Requirements Engineering., IEEE Computer Society Press. 1994
10. A. Ghose, G. Koliadis. Auditing Business Process Compliance. In Service-Oriented Computing-ICSOC 2007. Lecture Notes in Computer Science 4749. Springer Berlin/Heidelberg, 2007
11. J. Jürjens. Secure Systems Development with UML. Springer Verlag, 2005
12. J. Jürjens. Sound Methods and Effective Tools for Model-based Security Engineering with UML. In Proc. of the 27th International Conference on Software Engineering (ICSE). 2005
13. Y. Liu, S. Müller, K. Xu. A static compliance-checking framework for business process models. IBM Syst. J. 46, April 2007
14. L. T. Ly, S. Rinderle, P. Dadam. Integration and verification of semantic constraints in adaptive process management systems. Data Knowl. Eng. 64, January 2008
15. L. Ly, S. Rinderle-Ma, K. Göser, P. Dadam. On enabling integrated process compliance with semantic constraints in process management systems. Information Systems Frontiers, 2010
16. N. Li, M. Tripunitara, Z. Bizri. On Mutually Exclusive Roles and Separation-of-Duty. ACM Transactions on Information and System Security (TISSEC) 10(2), May 2007
17. H. Mouratidis, J. Jürjens. From Goal-Driven Security Requirements Engineering to Secure Design. International Journal of Intelligent Systems 25(8), 2010
18. J. D. Moffett, M. S. Sloman. Policy Conflict Analysis in Distributed System Management. Journal of Organizational Computing 4(1), 1994
19. OMG. Object Constraint Language Specification. available at: http://www.omg.org/technology/documents/formal/ocl.htm, February 2010. Version 2.2, formal/2010-02-01, The Object Management Group
20. OMG. Unified Modeling Language (OMG UML): Superstructure. available at: http://www.omg.org/technology/documents/formal/uml.htm, May 2010. Version 2.3, formal/2010-05-03, The Object Management Group
21. N. Russell, W. M. P. van der Aalst, A. H. M. ter Hofstede, P. Wohed. On the Suitability of UML 2.0 Activity Diagrams for Business Process Modelling. In Proc. of the Third Asia-Pacific Conference on Conceptual Modelling (APCCM). 2006
22. S. Sadiq, G. Governatori, K. Naimiri. Modeling Control Objectives for Business Process Compliance. In 5th International Conference on Business Process Management (BPM07). 2007
23. A. Schaad, J. D. Moffett. Delegation of Obligations. In Proceedings of the 3rd InternationalWorkshop on Policies for Distributed Systems and Networks (POLICY'02). 2002
24. A. Schaad, J. Moffett. Separation, review and supervision controls in the context of a credit application process: a case study of organisational control principles. In SAC '04: Proceedings of the 2004 ACM Symposium on Applied Computing. ACM, New York, NY, USA, 2004
25. M. Strembeck, J. Mendling. Modeling Process-related RBAC Models with Extended UML Activity Models. Information and Software Technology, 2010. doi:10.1016/j.infsof.2010.11.015
26. M. Strembeck. Embedding Policy Rules for Software-Based Systems in a Requirements Context. In Proc. of the 6th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY). June 2005
27. P.Wohed, M. Dumas, A. H. M. T. Hofstede, N. Russell. On the Suitability of BPMN for Business Process Modelling. In In Proceedings 4th International Conference on Business Process Management (BPM 2006), LNCS. 2006
28. C. Wolter, A. Schaad. Modeling of Task-Based Authorization Constraints in BPMN. In Alonso et al. (eds.), Business Process Management. Lecture Notes in Computer Science 4714. Springer Berlin/Heidelberg, 2007