Till sidans topp

Sidansvarig: Webbredaktion
Sidan uppdaterades: 2012-09-11 15:12

Tipsa en vän

A semi-automated BPMN-bas… - Göteborgs universitet Till startsida
Till innehåll Läs mer om hur kakor används på gu.se

A semi-automated BPMN-based framework for detecting conflicts between security, data-minimization, and fairness requirements

Artikel i vetenskaplig tidskrift
Författare Q. Ramadan
Daniel Strüber
M. Salnitri
J. Jurjens
V. Riediger
S. Staab
Publicerad i Software and Systems Modeling
Sidor 37
ISSN 1619-1366
Publiceringsår 2020
Publicerad vid Institutionen för data- och informationsteknik (GU)
Sidor 37
Språk en
Länkar dx.doi.org/10.1007/s10270-020-00781...
Ämnesord Conflicts, Requirements engineering, Security, Data minimization, Fairness, BPMN, privacy, system, identification, knowledge, design, goal, Computer Science
Ämneskategorier Data- och informationsvetenskap


Requirements are inherently prone to conflicts. Security, data-minimization, and fairness requirements are no exception. Importantly, undetected conflicts between such requirements can lead to severe effects, including privacy infringement and legal sanctions. Detecting conflicts between security, data-minimization, and fairness requirements is a challenging task, as such conflicts are context-specific and their detection requires a thorough understanding of the underlying business processes. For example, a process may require anonymous execution of a task that writes data into a secure data storage, where the identity of the writer is needed for the purpose of accountability. Moreover, conflicts not arise from trade-offs between requirements elicited from the stakeholders, but also from misinterpretation of elicited requirements while implementing them in business processes, leading to a non-alignment between the data subjects' requirements and their specifications. Both types of conflicts are substantial challenges for conflict detection. To address these challenges, we propose a BPMN-based framework that supports: (i) the design of business processes considering security, data-minimization and fairness requirements, (ii) the encoding of such requirements as reusable, domain-specific patterns, (iii) the checking of alignment between the encoded requirements and annotated BPMN models based on these patterns, and (iv) the detection of conflicts between the specified requirements in the BPMN models based on a catalog of domain-independent anti-patterns. The security requirements were reused from SecBPMN2, a security-oriented BPMN 2.0 extension, while the fairness and data-minimization parts are new. For formulating our patterns and anti-patterns, we extended a graphical query language called SecBPMN2-Q. We report on the feasibility and the usability of our approach based on a case study featuring a healthcare management system, and an experimental user study.

Sidansvarig: Webbredaktion|Sidan uppdaterades: 2012-09-11

På Göteborgs universitet använder vi kakor (cookies) för att webbplatsen ska fungera på ett bra sätt för dig. Genom att surfa vidare godkänner du att vi använder kakor.  Vad är kakor?