Risk-based analysis of business process executions

M. Alizadeh; N. Zannone

doi:10.1145/2857705.2857742

Risk-based analysis of business process executions

M. Alizadeh, N. Zannone

Security

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

6 Citations (Scopus)

3 Downloads (Pure)

Abstract

Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

Original language	English
Title of host publication	CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy
Place of Publication	New York
Publisher	Association for Computing Machinery, Inc
Pages	130-132
Number of pages	3
ISBN (Print)	978-1-4503-3935-3
DOIs	https://doi.org/10.1145/2857705.2857742
Publication status	Published - 9 Mar 2016
Event	6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016 - New Orleans, United States Duration: 9 Mar 2016 → 11 Mar 2016

Conference

Conference	6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016
Country/Territory	United States
City	New Orleans
Period	9/03/16 → 11/03/16

Keywords

Alignments
Auditing
Conformance checking
Risk assessment

Access to Document

10.1145/2857705.2857742

Cite this

@inproceedings{8f036f1f94b942fc99f2ad74b44a9a3d,

title = "Risk-based analysis of business process executions",

abstract = "Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.",

keywords = "Alignments, Auditing, Conformance checking, Risk assessment",

author = "M. Alizadeh and N. Zannone",

year = "2016",

month = mar,

day = "9",

doi = "10.1145/2857705.2857742",

language = "English",

isbn = "978-1-4503-3935-3",

pages = "130--132",

booktitle = "CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy",

publisher = "Association for Computing Machinery, Inc",

address = "United States",

note = "6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016 ; Conference date: 09-03-2016 Through 11-03-2016",

}

Alizadeh, M & Zannone, N 2016, Risk-based analysis of business process executions. in CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy. Association for Computing Machinery, Inc, New York, pp. 130-132, 6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016, New Orleans, United States, 9/03/16. https://doi.org/10.1145/2857705.2857742

TY - GEN

T1 - Risk-based analysis of business process executions

AU - Alizadeh, M.

AU - Zannone, N.

PY - 2016/3/9

Y1 - 2016/3/9

N2 - Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

AB - Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

KW - Alignments

KW - Auditing

KW - Conformance checking

KW - Risk assessment

UR - http://www.scopus.com/inward/record.url?scp=84964905596&partnerID=8YFLogxK

U2 - 10.1145/2857705.2857742

DO - 10.1145/2857705.2857742

M3 - Conference contribution

AN - SCOPUS:84964905596

SN - 978-1-4503-3935-3

SP - 130

EP - 132

BT - CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy

PB - Association for Computing Machinery, Inc

CY - New York

T2 - 6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016

Y2 - 9 March 2016 through 11 March 2016

ER -

Risk-based analysis of business process executions

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this