Model-based Situational Security Analysis

[e-mail] 2011.

计算机科学;

Jorn Eichler ; Roland Rieke

Others  :  http://ceur-ws.org/Vol-794/paper_1.pdf
PID  :  42795

学科分类：计算机科学（综合）

来源: CEUR

【 摘 要 】

Security analysis is growing in complexity with the increasein functionality, connectivity, and dynamics of current electronic busi- ness processes. To tackle this complexity, the application of models in pre-operational phases is becoming standard practice. Runtime models are also increasingly applied to analyze and validate the actual security status of business process instances. In this paper we present an approach to support not only model-based evaluation of the current security status of business process instances, but also to allow for decision support by an- alyzing close-future process states. Our approach is based on operational formal models derived from development-time process and security mod- els. This paper exemplies our approach utilizing real world processes from the logistics domain and demonstrates the systematic development and application of runtime models for situational security analysis.