Threat Representation Methods for Composite Service Process Models

2013 ◽  
Vol 4 (2) ◽  
pp. 1-18 ◽  
Author(s):  
Per Håkon Meland ◽  
Erlend Andreas Gjære

The Business Process Modeling Notation (BPMN) has become a popular standard for expressing high level business processes as well as technical specifications for software systems. However, the specification does not contain native support to express security information, which should not be overlooked in today’s world where every organization is exposed to threats and has assets to protect. Although a substantial amount of work enhancing BPMN 1.x with security related information already exists, the opportunities provided by version 2.0 have not received much attention in the security community so far. This paper gives an overview of security in BPMN and investigates several possibilities of representing threats in BPMN 2.0, in particular for design-time specification and runtime execution of composite services with dynamic behavior. Enriching BPMN with threat information enables a process-centric threat modeling approach that complements risk assessment and attack scenarios. We have included examples showing the use of error events, escalation events and text annotations for process, collaboration, choreography and conversation diagrams.

Author(s):  
Ghazi Alkhatib ◽  
Zakaria Maamar

Nowadays, Web services are emerging as a major technology for achieving automated interactions between distributed and heterogeneous applications (Benatallah, Sheng, & Dumas, 2003). Various technologies are behind this achievement including WSDL, UDDI, and SOAP1. (Curbera, Duftler, Khalaf et. al. 2002) These technologies aim at supporting the definition of services2, their advertisement, and their binding for triggering purposes. The advantages of Web services have already been demonstrated and highlight their capacity to be composed into high-level business process (Benatallah et al., 2003). Usually, composite services (CS) denote business processes and are meant to be offered to users who have needs to satisfy.


Author(s):  
Olga Korzachenko ◽  
Vadim Getman

Improvement of Business-Activities in Telecommunication Enterprises by the eTOM Business-Process Structural Model Implementation For now, in front of telecommunication branch enterprises of Ukraine, there is a problem of activity improvement with the purpose of granting high-quality services and maintenance of competitive position, both on internal, and on a foreign market. To solve this problem, telecommunication companies appropriate to use the mechanisms of business-oriented process management and improvement of end-to-end business-processes. The purpose of this article is a choice of effective business-process model that will allow telecommunications companies to provide modern, high quality and cost competitive services. During research, conditions of the telecommunication branch enterprises of Ukraine were investigated and key problems of their activity were revealed. Existing business-process models have been considered and analyzed and the optimal model was chosen, according to the put criteria. By results of the analysis a conclusion was drawn, that to the enterprises for business-process modeling is expedient for using eTOM - high-level system business-oriented model aimed for providing of any technological services, including IT. As advantages from introduction eTOM at the Ukrainian enterprises were analyzed.


Author(s):  
Lerina Aversano ◽  
Maria Tortorella

The traceability links existing between a business process and the supporting software systems s is a critical concern for the organizations, as it directly affects their performance. Methodologies and tools are needed for detecting these kinds of relationships and keeping an evidence of the existing connections. This paper proposes an approach for modelling a business processes evidencing the links existing between their activities and the components of the supporting software systems. The approach described in this paper is concerned with the use of information retrieval techniques to software maintenance and, in particular, to the problem of recovering traceability links between the business process models and the components of the supporting software system. An information retrieval approach is introduced based on two processing phases including syntactic and semantic analysis. The application of the approach is explored through a case study.


Author(s):  
Maria Estrela Ferreira da Cruz ◽  
Ricardo J. Machado ◽  
Maribel Yasmina Santos

The constant change and rising complexity of organizations, mainly due to the transforming nature of their business processes, has driven the increase of interest in business process management by organizations. It is recognized that knowing business processes can help to ensure that the software under development will meet the business needs. Some of software development processes (like unified process) already refer to business process modeling as a first effort in the software development process. A business process model usually is created under the supervision, clarification, approval, and validation of the business stakeholders. Thus, a business process model is a proper representation of the reality (as is or to be), having lots of useful information that can be used in the development of the software system that will support the business. The chapter uses the information existing in business process models to derive software models specially focused in generating a data model.


Author(s):  
Bhuvan Unhelkar ◽  
Abbass Ghanbary ◽  
Houman Younessi

This chapter describes the modeling of the Collaborative Web Based System (CWBS). This CWBS is the means by which the CBPE model, discussed earlier in this book, is practically implemented. The focus of this chapter, however, is on the models of collaborative business processes that can be implemented in CWBS. The software architecture aspect of the CWBS is based on the detailed discussions of technologies in previous chapters 2, 4 and 5. The models in this chapter are based on the Business Process Modeling Notation (BPMN) and the use cases are based on the specifications of the Unified Modeling Language (UML). These notations and the ensuing process models are important when organizations try to collaborate with each other. These process models show, visually, how the interactions amongst multiple organizations will take place from a business viewpoint.


2022 ◽  
pp. 1810-1836
Author(s):  
Maria Estrela Ferreira da Cruz ◽  
Ricardo J. Machado ◽  
Maribel Yasmina Santos

The constant change and rising complexity of organizations, mainly due to the transforming nature of their business processes, has driven the increase of interest in business process management by organizations. It is recognized that knowing business processes can help to ensure that the software under development will meet the business needs. Some of software development processes (like unified process) already refer to business process modeling as a first effort in the software development process. A business process model usually is created under the supervision, clarification, approval, and validation of the business stakeholders. Thus, a business process model is a proper representation of the reality (as is or to be), having lots of useful information that can be used in the development of the software system that will support the business. The chapter uses the information existing in business process models to derive software models specially focused in generating a data model.


2006 ◽  
Vol 9 (1) ◽  
Author(s):  
Elvira Rolón ◽  
Francisco Ruiz ◽  
Félix García ◽  
Mario Piattini

In this paper, we define a set of metrics for the evaluation of conceptual models of business processes. The proposal supposes the adaptation and extension of the FMESP framework (Framework for the Modeling and Evaluation of Software Processes). This adaptation can be carried out thanks to the similarities that exist between both types of processes (software and business). FMESP includes a set of metrics, which provide the quantitative basis necessary to find out the maintainability of the software process models. This proposal has been used as the starting point in proposing a set of metrics for the evaluation of the complexity of business process models defined by BPMN (Business Process Modeling Notation). Moreover, the groups of metrics of FMESP have been extended. This is because the models of business processes represented in BPMN include quite a number of aspects of interest in this domain which are not considered in software processes modelled with SPEM (Software Process Engineering Metamodel).


2010 ◽  
pp. 214-241
Author(s):  
Dickson K.W. Chiu ◽  
Shing-Chi Cheung ◽  
Sven Till ◽  
Lalita Narupiyakul ◽  
Patrick C.K. Hung

In a business-to-business (B2B) e-service environment, cross-organizational collaboration is important for attaining the interoperability of business processes and their proper enactment. The authors find that B2B collaboration can be divided into multiple layers and perspectives, which has not been adequately addressed in the literature. Besides regular e-service process enactment, robust collaboration requires enforcement, while quality collaboration involves relationship management. These problems are challenging, as they require the enactment of business processes and their monitoring in counter parties outside an organization’s boundary. This paper presents a framework for B2B process collaboration with three layers, namely, collaboration requirements layer, business rule layer, and system implementation layer. The collaboration requirements layer specifies the cross-organizational requirements of e-service processes. In the business rule layer, detailed knowledge of these three types of process collaboration requirements is defined as business rules in a unified Event-Condition-Action (ECA) form. In the system implementation layer, event collaboration interfaces are supported by contemporary Enterprise JavaBeans and Web Services. Based on this architecture, a methodology is presented for the engineering of e-service process collaboration from high-level business requirements down to system implementation details. As a result, B2B process collaboration can be seamlessly defined, enacted, and enforced. Conceptual models of various layers are given in the Unified Modeling Language (UML). We illustrate the applicability of our framework with a running example based on a supply-chain process and evaluate our approach from the perspective of three main stakeholders of e-collaboration, namely users, management, and systems developers.


Author(s):  
Dickson K.W. Chiu ◽  
Shing-Chi Cheung ◽  
Sven Till ◽  
Lalita Narupiyakul ◽  
Patrick Hung

In a business-to-business (B2B) e-service environment, cross-organizational collaboration is important for attaining the interoperability of business processes and their proper enactment. The authors find that B2B collaboration can be divided into multiple layers and perspectives, which has not been adequately addressed in the literature. Besides regular e-service process enactment, robust collaboration requires enforcement, while quality collaboration involves relationship management. These problems are challenging, as they require the enactment of business processes and their monitoring in counter parties outside an organization’s boundary. This paper presents a framework for B2B process collaboration with three layers, namely, collaboration requirements layer, business rule layer, and system implementation layer. The collaboration requirements layer specifies the cross-organizational requirements of e-service processes. In the business rule layer, detailed knowledge of these three types of process collaboration requirements is defined as business rules in a unified Event-Condition-Action (ECA) form. In the system implementation layer, event collaboration interfaces are supported by contemporary Enterprise JavaBeans and Web Services. Based on this architecture, a methodology is presented for the engineering of e-service process collaboration from high-level business requirements down to system implementation details. As a result, B2B process collaboration can be seamlessly defined, enacted, and enforced. Conceptual models of various layers are given in the Unified Modeling Language (UML). We illustrate the applicability of our framework with a running example based on a supply-chain process and evaluate our approach from the perspective of three main stakeholders of e-collaboration, namely users, management, and systems developers.


Author(s):  
Donya Rooein ◽  
Devis Bianchini ◽  
Francesco Leotta ◽  
Massimo Mecella ◽  
Paolo Paolini ◽  
...  

AbstractThis paper proposes a general approach for using conversational interfaces such as chatbots to offer adaptive learning of business processes in an environment involving different actors. Adaptivity concerns both the content being proposed, the sequence of learning items, and the way the conversation is conducted. The original approach allows the development of sustainable chatbots and empowers various non-technical actors (authors, teachers, publishers, and learners) to control the chatbot features directly. The aCHAT-WF framework (adaptive CHATbot for WorkFlows), proposed in this paper for managing conversational interfaces, conceptually represents all the aspects related to a conversation about business processes, with different facets for the user, the conversation flow, and the conversation contents, combining them to obtain a flexible interaction with the user. The paper focuses on the different preparation phases for instructional material based on Business Process Modeling Notation (BPMN) models, separating the different roles involved in the construction of a chatbot for teaching business processes and with the possibility of defining different styles for the interaction with the users. The proposed method is configuration-driven, to facilitate the separation of the different aspects of the control of the interaction and the delivery of contents.


Sign in / Sign up

Export Citation Format

Share Document