From security-by-design to the identification of security-critical deviations in process executions

Mattia Salnitri; Mahdi Alizadeh; Daniele Giovanella; Nicola Zannone; Paolo Giorgini

doi:10.1007/978-3-319-92901-9_19

From security-by-design to the identification of security-critical deviations in process executions

Mattia Salnitri, Mahdi Alizadeh, Daniele Giovanella, Nicola Zannone, Paolo Giorgini

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

8 Citations (Scopus)

3 Downloads (Pure)

Abstract

Security-by-design is an emerging paradigm that aims to deal with security concerns from the early phases of the system development. Although this paradigm can provide theoretical guarantees that the designed system complies with the defined processes and security policies, in many application domains users are allowed to deviate from them to face unpredictable situations and emergencies. Some deviations can be harmless and, in some cases, necessary to ensure business continuity, whereas other deviations might threat central aspects of the system, such as its security. In this paper, we propose a tool supported method for the identification of security-critical deviations in process executions using compliance checking analysis. We implemented the approach as part of the STS-Tool and evaluated it using a real loan management process of a Dutch financial institute.

Original language	English
Title of host publication	Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings
Publisher	Springer
Pages	218-234
Number of pages	17
ISBN (Print)	9783319929002
DOIs	https://doi.org/10.1007/978-3-319-92901-9_19
Publication status	Published - 1 Jan 2018
Event	30th International Conference on Advanced Information Systems Engineering, CAiSE 2018 - Tallinn, Estonia Duration: 11 Jun 2018 → 15 Jun 2018 Conference number: 30 https://caise2018.ut.ee/

Publication series

Name	Lecture Notes in Business Information Processing
Volume	317
ISSN (Print)	1865-1348

Conference

Conference	30th International Conference on Advanced Information Systems Engineering, CAiSE 2018
Abbreviated title	CAiSE 2018
Country/Territory	Estonia
City	Tallinn
Period	11/06/18 → 15/06/18
Internet address	https://caise2018.ut.ee/

Access to Document

10.1007/978-3-319-92901-9_19

Cite this

Salnitri, M., Alizadeh, M., Giovanella, D., Zannone, N., & Giorgini, P. (2018). From security-by-design to the identification of security-critical deviations in process executions. In Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings (pp. 218-234). (Lecture Notes in Business Information Processing; Vol. 317). Springer. https://doi.org/10.1007/978-3-319-92901-9_19

@inproceedings{9c6ebdc0a6254c229e0f054814ff5a3a,

title = "From security-by-design to the identification of security-critical deviations in process executions",

abstract = "Security-by-design is an emerging paradigm that aims to deal with security concerns from the early phases of the system development. Although this paradigm can provide theoretical guarantees that the designed system complies with the defined processes and security policies, in many application domains users are allowed to deviate from them to face unpredictable situations and emergencies. Some deviations can be harmless and, in some cases, necessary to ensure business continuity, whereas other deviations might threat central aspects of the system, such as its security. In this paper, we propose a tool supported method for the identification of security-critical deviations in process executions using compliance checking analysis. We implemented the approach as part of the STS-Tool and evaluated it using a real loan management process of a Dutch financial institute.",

author = "Mattia Salnitri and Mahdi Alizadeh and Daniele Giovanella and Nicola Zannone and Paolo Giorgini",

year = "2018",

month = jan,

day = "1",

doi = "10.1007/978-3-319-92901-9_19",

language = "English",

isbn = "9783319929002",

series = "Lecture Notes in Business Information Processing",

publisher = "Springer",

pages = "218--234",

booktitle = "Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings",

address = "Germany",

note = "30th International Conference on Advanced Information Systems Engineering, CAiSE 2018, CAiSE 2018 ; Conference date: 11-06-2018 Through 15-06-2018",

url = "https://caise2018.ut.ee/",

}

Salnitri, M, Alizadeh, M, Giovanella, D, Zannone, N & Giorgini, P 2018, From security-by-design to the identification of security-critical deviations in process executions. in Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings. Lecture Notes in Business Information Processing, vol. 317, Springer, pp. 218-234, 30th International Conference on Advanced Information Systems Engineering, CAiSE 2018, Tallinn, Estonia, 11/06/18. https://doi.org/10.1007/978-3-319-92901-9_19

From security-by-design to the identification of security-critical deviations in process executions. / Salnitri, Mattia; Alizadeh, Mahdi; Giovanella, Daniele et al.
Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings. Springer, 2018. p. 218-234 (Lecture Notes in Business Information Processing; Vol. 317).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - From security-by-design to the identification of security-critical deviations in process executions

AU - Salnitri, Mattia

AU - Alizadeh, Mahdi

AU - Giovanella, Daniele

AU - Zannone, Nicola

AU - Giorgini, Paolo

N1 - Conference code: 30

PY - 2018/1/1

Y1 - 2018/1/1

N2 - Security-by-design is an emerging paradigm that aims to deal with security concerns from the early phases of the system development. Although this paradigm can provide theoretical guarantees that the designed system complies with the defined processes and security policies, in many application domains users are allowed to deviate from them to face unpredictable situations and emergencies. Some deviations can be harmless and, in some cases, necessary to ensure business continuity, whereas other deviations might threat central aspects of the system, such as its security. In this paper, we propose a tool supported method for the identification of security-critical deviations in process executions using compliance checking analysis. We implemented the approach as part of the STS-Tool and evaluated it using a real loan management process of a Dutch financial institute.

AB - Security-by-design is an emerging paradigm that aims to deal with security concerns from the early phases of the system development. Although this paradigm can provide theoretical guarantees that the designed system complies with the defined processes and security policies, in many application domains users are allowed to deviate from them to face unpredictable situations and emergencies. Some deviations can be harmless and, in some cases, necessary to ensure business continuity, whereas other deviations might threat central aspects of the system, such as its security. In this paper, we propose a tool supported method for the identification of security-critical deviations in process executions using compliance checking analysis. We implemented the approach as part of the STS-Tool and evaluated it using a real loan management process of a Dutch financial institute.

UR - http://www.scopus.com/inward/record.url?scp=85048636334&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-92901-9_19

DO - 10.1007/978-3-319-92901-9_19

M3 - Conference contribution

AN - SCOPUS:85048636334

SN - 9783319929002

T3 - Lecture Notes in Business Information Processing

SP - 218

EP - 234

BT - Information Systems in the Big Data Era - CAiSE Forum 2018, Proceedings

PB - Springer

T2 - 30th International Conference on Advanced Information Systems Engineering, CAiSE 2018

Y2 - 11 June 2018 through 15 June 2018

ER -

From security-by-design to the identification of security-critical deviations in process executions

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this