Risk-based analysis of business process executions

M. Alizadeh; N. Zannone

doi:10.1145/2857705.2857742

Risk-based analysis of business process executions

M. Alizadeh, N. Zannone

Security

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/Congresprocedure › Conferentiebijdrage › Academic › peer review

5 Citaten (Scopus)

3 Downloads (Pure)

Samenvatting

Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

Originele taal-2	Engels
Titel	CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy
Plaats van productie	New York
Uitgeverij	Association for Computing Machinery, Inc
Pagina's	130-132
Aantal pagina's	3
ISBN van geprinte versie	978-1-4503-3935-3
DOI's	https://doi.org/10.1145/2857705.2857742
Status	Gepubliceerd - 9 mrt 2016
Evenement	6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016 - New Orleans, Verenigde Staten van Amerika Duur: 9 mrt 2016 → 11 mrt 2016

Congres

Congres	6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016
Land	Verenigde Staten van Amerika
Stad	New Orleans
Periode	9/03/16 → 11/03/16

Toegang tot document

10.1145/2857705.2857742

Link to publication in Scopus

Vingerafdruk Duik in de onderzoeksthema's van 'Risk-based analysis of business process executions'. Samen vormen ze een unieke vingerafdruk.

Citeer dit

@inproceedings{8f036f1f94b942fc99f2ad74b44a9a3d,

title = "Risk-based analysis of business process executions",

abstract = "Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.",

keywords = "Alignments, Auditing, Conformance checking, Risk assessment",

author = "M. Alizadeh and N. Zannone",

year = "2016",

month = mar,

day = "9",

doi = "10.1145/2857705.2857742",

language = "English",

isbn = "978-1-4503-3935-3",

pages = "130--132",

booktitle = "CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy",

publisher = "Association for Computing Machinery, Inc",

address = "United States",

note = "6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016 ; Conference date: 09-03-2016 Through 11-03-2016",

}

Alizadeh, M & Zannone, N 2016, Risk-based analysis of business process executions. in CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy. Association for Computing Machinery, Inc, New York, blz. 130-132, 6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016, New Orleans, Verenigde Staten van Amerika, 9/03/16. https://doi.org/10.1145/2857705.2857742

TY - GEN

T1 - Risk-based analysis of business process executions

AU - Alizadeh, M.

AU - Zannone, N.

PY - 2016/3/9

Y1 - 2016/3/9

N2 - Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

AB - Organizations need to monitor their business processes to ensure that what actually happens in the system is compliant with the prescribed behavior. Deviations from the prescribed behavior may correspond to violations of security requirements and expose organizations to severe risks. Thus, it is crucial for organizations to detect and address nonconforming behavior as early as possible. In this paper, we present an auditing framework that facilitates the analysis of process executions by detecting nonconforming behaviors and ranking them with respect to their criticality. Our framework employs conformance checking techniques to detect possible explanations of nonconformity. Based on such explanations, the framework assesses the criticality of nonconforming process executions based on historical logging data and context information.

KW - Alignments

KW - Auditing

KW - Conformance checking

KW - Risk assessment

UR - http://www.scopus.com/inward/record.url?scp=84964905596&partnerID=8YFLogxK

U2 - 10.1145/2857705.2857742

DO - 10.1145/2857705.2857742

M3 - Conference contribution

AN - SCOPUS:84964905596

SN - 978-1-4503-3935-3

SP - 130

EP - 132

BT - CODASPY 2016 - Proceedings of the 6th ACM Conference on Data and Application Security and Privacy

PB - Association for Computing Machinery, Inc

CY - New York

T2 - 6th ACM Conference on Data and Application Security and Privacy, CODASPY 2016

Y2 - 9 March 2016 through 11 March 2016

ER -