Showing papers on "Business Process Model and Notation published in 2016"
TL;DR: The Triple Layered Business Model Canvas as discussed by the authors is a tool for exploring sustainability-oriented business model innovation, which extends the original business model canvas by adding two layers: an environmental layer based on a lifecycle perspective and a stakeholder perspective.
589 citations
TL;DR: The need for horizontal integration between the two management functions to enable strategic and operational business-IT alignment is proposed and it is suggested that IT as a strategic driver necessitates reciprocal integration at both levels.
99 citations
TL;DR: This paper presents a framework for developing tool support for the design and management of new business models and extends existing literature by highlighting the importance of collaboration between participants in a business model development project.
Abstract: This paper presents a framework for developing tool support for the design and management of new business models. Existing IT tools supporting the process of designing, innovating, and evaluating a company's business model are currently not leveraging the full potential of tool support, because they do not make use of theoretical and empirical knowledge around business model development. Against this backdrop, we analyze existing knowledge on business model design and management, resulting in a first systematization of the activities that are necessary for developing and managing new business models. In order to complement this knowledge and to identify the requirements for supporting these activities, a series of expert interviews is conducted. Based on the results of the interview series, a new business model development tool is created and evaluated. The learnings of this development process are then consolidated in a unified framework. This framework constitutes a new solution for systematically designing tool support for business model development and extends existing literature by highlighting the importance of collaboration between participants in a business model development project. It also provides designers of new business model development tool with an empirically based conceptualization to guide their efforts.
91 citations
13 Jul 2016
TL;DR: This paper presents an Industry 4.0 process modeling language (I4PML) that is an extension (UML profile with stereotypes) of OMG's BPMN (Business Process Model and Notation) standard and describes a method for the specification of Industry 5.0 applications using UML and I4P ML.
Abstract: The term Industry 4.0 derives from the new (fourth) industrial revolution enabling suppliers and manufacturers to leverage new technological concepts like Internet of Things, Big Data, and Cloud Computing: New or enhanced products and services can be created, cost be reduced and productivity be increased. Similar terms are Smart Factory or Smart Manufacturing. The ideas, concepts and technologies are not hype anymore — they are at least partly reality, but many software specification and development aspects are still not sufficiently covered, e.g. standardization, specification and modeling languages. This paper presents an Industry 4.0 process modeling language (I4PML) that is an extension (UML profile with stereotypes) of OMG's BPMN (Business Process Model and Notation) standard. We also describe a method for the specification of Industry 4.0 applications using UML and I4PML.
88 citations
[...]
TL;DR: BPMN Miner is able to detect and filter out noise in the event log arising for example from data entry errors, missing event records or infrequent behavior and are more accurate and less complex than those derived with flat process discovery techniques.
86 citations
TL;DR: In this paper, a set-theoretic approach is proposed to investigate interdependencies of complementarity, efficiency, novelty, and lock-in-based business models, and empirical results demonstrate the role of three unknown specific business model configurations fostering financial performance.
82 citations
TL;DR: The proposed uBPMN not only allows for modeling ubiquitous business processes but also lays the groundwork for potentially deploying a variety of ubiquitous computing technologies.
Abstract: Context: Business Process Model and Notation (BPMN) is the de facto standard for business process modeling. It was developed by the Object Management Group with support of the major organizations in the fields of software engineering and information systems. Despite its wide use, when it comes to representing ubiquitous business processes, this business process modeling language is lacking. Objective: To address BPMN’s deficiency in representing ubiquitous business processes, we extend it and present uBPMN (or ubiquitous BPMN). Method: First, we analyze the modeling requirements for representing ubiquitous business processes. Based on the requirements, we conservatively extend the Meta-Object Facility meta-model and the XML Schema Definition of BPMN as well as extend the notation. The extension, that we call uBPMN follows the same outline as set by the Object Management Group for BPMN. Results: The proposed uBPMN not only allows for modeling ubiquitous business processes but also lays the groundwork for potentially deploying a variety of ubiquitous computing technologies. We illustrate all of uBPMN’s capabilities and benefits with real-life examples. Conclusion: uBPMN extends BPMN v2.0 with new capabilities to deal with ubiquitous computing technologies.
77 citations
TL;DR: The paper presents the importance and benefits of using Web services for process management in e-Business and provides insights into various technical issues through the introduction to a Web services-oriented architecture for processmanagement, which is exemplified using a prototype e-Procurement system.
Abstract: Business process management (BPM) includes the capability to discover, design, deploy, execute, interact with, operate, optimize, and analyze business processes. It is critical for businesses in the current intensive and competitive market. Traditional BPM has problems in interoperability, agility, and flexibility. This research investigates the role of Web services in process management. Web services are loosely coupled, reusable software components that semantically encapsulate discrete functionality. They provide a distributed computing technology for publishing, discovering, and consuming business services on the Internet or intranet using standard XML protocols and formats. Web services provide a way to empower business users to specify complex business functionality in a clear, building-block fashion that can be quickly modified. The paper presents the importance and benefits of using Web services for process management in e-Business. It also provides insights into various technical issues through t...
75 citations
Book•
12 Feb 2016
TL;DR: This volume offers a definitive guide to the use of patterns, which synthesize the wide range of approaches to modeling business processes and describes three major pattern catalogs, presented from control-flow, data, and resource perspectives.
Abstract: The study of business processes has emerged as a highly effective approach to coordinating an organization's complex service- and knowledge-based activities. The growing field of business process management (BPM) focuses on methods and tools for designing, enacting, and analyzing business processes. This volume offers a definitive guide to the use of patterns, which synthesize the wide range of approaches to modeling business processes. It provides a unique and comprehensive introduction to the well-known workflow patterns collection -- recurrent, generic constructs describing common business process modeling and execution scenarios, presented in the form of problem-solution dialectics. The underlying principles of the patterns approach ensure that they are independent of any specific enabling technology, representational formalism, or modeling approach, and thus broadly applicable across the business process modeling and business process technology domains. The authors, drawing on extensive research done by the Workflow Patterns Initiative, offer a detailed introduction to the fundamentals of business process modeling and management; describe three major pattern catalogs, presented from control-flow, data, and resource perspectives; and survey related BPM patterns. The book, a companion to the authoritative Workflow Patterns website, will be an essential resource for both academics and practitioners working in business process modeling and business process management.
61 citations
TL;DR: An overview of the prevailing approaches to design a business process architecture is provided, which showed that practitioners have a preference for using approaches that are based on reference models and approaches that is based on the identification of business functions or business objects.
Abstract: With the uptake of business process modelling in practice, the demand grows for guidelines that lead to consistent and integrated collections of process models. The notion of a business process architecture has been explicitly proposed to address this. This paper provides an overview of the prevailing approaches to design a business process architecture. Furthermore, it includes evaluations of the usability and use of the identified approaches. Finally, it presents a framework for business process architecture design that can be used to develop a concrete architecture. The use and usability were evaluated in two ways. First, a survey was conducted among 39 practitioners, in which the opinion of the practitioners on the use and usefulness of the approaches was evaluated. Second, four case studies were conducted, in which process architectures from practice were analysed to determine the approaches or elements of approaches that were used in their design. Both evaluations showed that practitioners have a preference for using approaches that are based on reference models and approaches that are based on the identification of business functions or business objects. At the same time, the evaluations showed that practitioners use these approaches in combination, rather than selecting a single approach.
Posted Content•
TL;DR: It was found that the building integration process allows constructing a robust business strategy proposal in a structured mode taking into account the benefits of each tool and reducing the disadvantages.
Abstract: The importance of linking efficiently the outputs of RD it's applicability and simplicity has given it greater acceptance and dissemination. Furthermore, the Technology Roadmap is presented as a valuable tool to visualize the relationships over time of the market, technology and product strategies; TRMs allow decision makers to identify gaps between the current and the future business strategy.BMC and TRMs have been used independently of each other. This work has the objective to present a methodology of the building process integration of these two tools, to provide a business model and a technology roadmap for the business idea or new product concept that are aligned to the current and future business needs. Then, it is explained and described in a practical manner by a case of study. One of the benefits of using this methodology is that a business constructs a BMC and TRM with two different approaches giving the process the perspective of future analysis and also visualizing elements for the current business. It was found that the building integration process allows constructing a robust business strategy proposal in a structured mode taking into account the benefits of each tool and reducing the disadvantages.
TL;DR: An architectural pattern to improve the development of eLearning ecosystems is formalized with the Service-oriented architecture Modelling Language and tested in a real context, namely, an institutional development for the Spanish Public Administration, which demonstrates that the pattern works properly.
TL;DR: In this paper, the authors examine how entrepreneurs identify business opportunities and how they translate them into a workable business idea and propose that a parsimonious view of digital business models, aligned with the lean start-up ide...
Abstract: Digital business model research spans the disciplines of information systems, marketing and entrepreneurship. Despite the growing research in the area there is a lack of understanding of how digital entrepreneurs identify business opportunities and conceptualize those in a business model. The literature on business models lacks consistent terminology and specification of critical components. Through an explorative study of digital entrepreneurs we examine how entrepreneurs identify business opportunities and how they translate them into a workable business idea. Although entrepreneurs typically have difficulty explaining their business model components we identified that critical features in our simplicity framework include three main modules, transaction/matching, marketing and back-office components, and simplicity in terms of value proposition, conceptualization approach and usability. This research proposes that a parsimonious view of digital business models, aligned with the lean start-up ide...
01 Jun 2016
TL;DR: BPMN4CPS is proposed, which provides a set of extensions for BPMN to properly and accurately model CPS processes and a case study of an ambulance drone system is presented.
Abstract: Modeling is one of the most important topics in the domain of Cyber-Physical Systems (CPS). In the field of process modelling, Business Process Modeling and Notation (BPMN) is the most used standard. However, BPMN remains limited to cater for the specific characteristics and properties of CPS such as real world properties. In this paper, we propose BPMN4CPS, which provides a set of extensions for BPMN to properly and accurately model CPS processes. In order to illustrate the applicability of BPMN4CPS, we present a case study of an ambulance drone system.
Book•
28 Mar 2016
TL;DR: This book starts with an introduction to process modeling and process paradigms, then explains how to query and analyze process models, and how to analyze the process execution data, and describes the state of the art in this area before examining different analytics techniques in detail.
Abstract: This book starts with an introduction to process modeling and process paradigms, then explains how to query and analyze process models, and how to analyze the process execution data. In this way, readers receive a comprehensive overview of what is needed to identify, understand and improve business processes. The book chiefly focuses on concepts, techniques and methods. It covers a large body of knowledge on process analytics including process data querying, analysis, matching and correlating process data and models to help practitioners and researchers understand the underlying concepts, problems, methods, tools and techniques involved in modern process analytics. Following an introduction to basic business process and process analytics concepts, it describes the state of the art in this area before examining different analytics techniques in detail. In this regard, the book covers analytics over different levels of process abstractions, from process execution data and methods for linking and correlating process execution data, to inferring process models, querying process execution data and process models, and scalable process data analytics methods. In addition, it provides a review of commercial process analytics tools and their practical applications. The book is intended for a broad readership interested in business process management and process analytics. Itprovides researchers with an introduction to these fields by comprehensively classifying the current state of research, by describing in-depth techniques and methods, and by highlighting future research directions. Lecturers will find a wealth of material to choose from for a variety of courses, ranging from undergraduate courses in business process management to graduate courses in business process analytics. Lastly, it offers professionals a reference guide to the state of the art in commercial tools and techniques, complemented by many real-world use case scenarios.
Journal Article•
TL;DR: In this paper, the authors analyzed 585 BPMN 2.0 process models from six companies and found that split and join representations, message flow, the lack of proper model decomposition, and labeling related to quality issues.
Abstract: Many organizations use business process models to document business operations and formalize business requirements in software-engineering projects. The Business Process Model and Notation (BPMN), a specification by the Object Management Group, has evolved into the leading standard for process modeling. One challenge is BPMN's complexity: it offers a huge variety of elements and often several representational choices for the same semantics. This raises the question of how well modelers can deal with these choices. Empirical insights into BPMN use from the practitioners' perspective are still missing. To close this gap, researchers analyzed 585 BPMN 2.0 process models from six companies. They found that split and join representations, message flow, the lack of proper model decomposition, and labeling related to quality issues. They give five specific recommendations on how to avoid these issues.
01 Feb 2016
TL;DR: In this article, the authors used the approach for a case study in the e-commerce business and discussed the advantages and disadvantages of computational modeling as a strategy and management tool, which enables decision makers to obtain insightful experimental designs with a company's business model.
Abstract: A business model is an essential part of a company—regardless of whether the company is a small entity or a global enterprise. Interest in business models in research and in practice has grown significantly in the last decade. Strategic initiatives and changes in business models are particularly cost intensive and uncertain. Thus, the analysis and understanding of a business model’s structure and its changes induced by strategic initiatives is crucial. Approaches to business model analysis needs to support strategists and decision-makers, enabling them to evaluate strategic initiatives and alternatives in fluent environments where there is little or no prior experience. However, regrettably, the qualitative approaches currently available fall short of providing sound guidelines especially in uncertain, highly volatile situations that involve rapid technological developments and agile competitors, which middle managers and top-level executives are often faced with. The quantitative approach used in the article concerning business model analysis is founded on a systemic simulation methodology which enables decision makers to obtain insightful experimental designs with a company’s business model. Computational modeling helps to understand business models as complex systems with dynamic interdependencies and thereby it can complement existing tools. This article uses the approach for a case study in the e-commerce business. It discusses advantages and disadvantages of computational modeling as a strategy and management tool.
TL;DR: The results presented in the paper have been achieved based on the knowledge transformation perspective along the lines suggested by Nonaka in SECI model, and the modification of this model has been used to understand the risks and requirements connected to a particular process development strategy.
Abstract: The traditional way of business process development is via creating a detailed model of a business process in question, acquiring an IT-system to support it, and then implementing it in the organizational practice. Acquiring a system can be done via designing and manufacturing it by the business itself, or via commissioning it to somebody else. Alternatively, a generic system can be bought and configured according to the business process model created. The traditional approach has a number of risks that become visible only during the latest phase of introducing the system in the organizational practice, e.g., when it becomes clear that the system does not fit the business and/or people who work in it. These risks could be mitigated by using an agile approach to the development of business processes. In agile approach: (a) the phases of process modeling, IT-system design, and manufacturing are merged into one, and (b) instead of using one big cycle, a series of smaller development cycles is used. The paper discusses what is needed to implement the agile approach, and in which business situations the agile approach is the most appropriate. Examples of tools to support agile development are presented and analyzed. The results presented in the paper have been achieved based on the knowledge transformation perspective along the lines suggested by Nonaka in SECI model. The modification of this model has been used to understand the risks and requirements connected to a particular process development strategy.
14 Nov 2016
TL;DR: In this article, the authors propose an alternative approach that separates the concern of producing accurate models with ensuring their structuredness, sometimes sacrificing the former to ensure the latter, and apply a well-known heuristic that discovers more accurate but sometimes unstructured (and even unsound) process models, and then transform the resulting model into a structured one.
Abstract: This paper addresses the problem of discovering business process models from event logs. Existing approaches to this problem strike various tradeoffs between accuracy and understandability of the discovered models. With respect to the second criterion, empirical studies have shown that block-structured process models are generally more understandable and less error-prone than unstructured ones. Accordingly, several automated process discovery methods generate block-structured models by construction. These approaches however intertwine the concern of producing accurate models with that of ensuring their structuredness, sometimes sacrificing the former to ensure the latter. In this paper we propose an alternative approach that separates these two concerns. Instead of directly discovering a structured process model, we first apply a well-known heuristic that discovers more accurate but sometimes unstructured (and even unsound) process models, and then transform the resulting model into a structured one. An experimental evaluation shows that our “discover and structure” approach outperforms traditional “discover structured” approaches with respect to a range of accuracy and complexity measures.
Proceedings Article•
01 Jan 2016TL;DR: Four different transformation patterns show that data-driven innovations enable a transformation from product to service-oriented offerings and an optimization of internal and external processes and thus, of the productivity is possible.
Abstract: Driven by advances in information and communication technologies (ICT), manifold business opportunities emerge in diverse industries. In this development, data plays an important role as an essential element of change and economic growth. As a consequence of this development, the analysis of service business models and the role of data in these models has become a focus of interest in practice and research. This paper focuses on international companies that implemented successfully data-driven innovations and aims, in particular, at the analysis of the effects of data-driven innovation on companies’ business models. Based on a multiple case study method, this paper proposes four different transformation patterns: (1) cooperative value innovation, (2) customer-centric value innovation, (3) cooperative productivity improvement, and (4) company-centric productivity improvement. These patterns show that data-driven innovations enable a transformation from product to service-oriented offerings. Furthermore, an optimization of internal and external processes and thus, of the productivity is possible.
TL;DR: Researchers analyzed 585 BPMN 2.0 process models from six companies and found that split and join representations, message flow, the lack of proper model decomposition, and labeling related to quality issues.
Abstract: Many organizations use business process models to document business operations and formalize business requirements in software-engineering projects. The Business Process Model and Notation (BPMN), a specification by the Object Management Group, has evolved into the leading standard for process modeling. One challenge is BPMN's complexity: it offers a huge variety of elements and often several representational choices for the same semantics. This raises the question of how well modelers can deal with these choices. Empirical insights into BPMN use from the practitioners' perspective are still missing. To close this gap, researchers analyzed 585 BPMN 2.0 process models from six companies. They found that split and join representations, message flow, the lack of proper model decomposition, and labeling related to quality issues. They give five specific recommendations on how to avoid these issues.
TL;DR: An adequate support for managing such a kind of alignment and suggesting evolution actions if misalignment is detected is provided and an approach including modeling and measuring activities for evaluating the alignment level and suggest evolution activities, if needed is proposed.
Abstract: Context The alignment degree existing between a business process and the supporting software systems strongly affects the performance of the business process execution. Methodologies and tools are needed for detecting the alignment level and keeping a business process aligned with the supporting software systems even when they evolve. Objective This paper aims to provide an adequate support for managing such a kind of alignment and suggesting evolution actions if misalignment is detected. It proposes an approach including modeling and measuring activities for evaluating the alignment level and suggesting evolution activities, if needed. Method The proposed approach is composed of three main phases. The first phase regards the modeling of business process and software systems supporting it by applying a modeling notation based on UML and adequately extended for representing business processes. The second phase concerns the evaluation of the alignment degree through the assessment of a set of metrics codifying the alignment concept. Finally, the last phase analyses the evaluation results for suggesting evolution activities if misalignment is detected. Results The paper analyses the application of the proposed approach to a case study regarding a working business process and related software system. The obtained results provided useful suggestion for evolving the supporting software system and improving the alignment level existing between them and the supported business process. Conclusion The approach contributes in all phases of the process and software system evolution, even if its improvement can be needed for identifying the impact of the changes. The proposed approach facilitates the understanding of business processes, software systems and related models. This favors the interaction of the software and business analysts, as it was possible to better formulate the interviews to be conducted with regard to the objectives and, thus, to collect the required data.
01 Jan 2016
TL;DR: This chapter focuses on the metamodeling approach for the hybridization of BPMN, ER, EPC, UML and Petri Nets within a single modeling method identified as FCML, with a proof of concept named Bee-Up implemented in OMiLAB.
Abstract: Regardless of the application domain, both the analysis of existing systems and the creation of new systems benefit extensively from having the system modeled from a conceptual point of view in order to capture its behavioral, structural or semantic characteristics, while abstracting away irrelevant details. Depending on which relevant details are assimilated in the modeling language, modeling tools may support different degrees of domain-specificity. The boundaries of what domain-specific means are as ambiguous as the definition of a domain—it may be a business sector, a paradigm, or a narrow application area. However, some patterns and invariants are recurring across domains and this has led to the emergence of commonly used modeling languages that incorporate such fundamental concepts. This chapter focuses on the metamodeling approach for the hybridization of BPMN, ER, EPC, UML and Petri Nets within a single modeling method identified as FCML, with a proof of concept named Bee-Up implemented in OMiLAB.
01 Jan 2016
TL;DR: This demonstration shows the capabilities of the Melanee tool in the context of defining a language to model the structure of an enterprise through deep, multi-format,multi-notation user-defined languages.
Abstract: Multi-level modeling has gained increasing attention in recent years as the maturity of the supporting tools has grown. One of the most advanced tools for deep modeling is Melanee which supports modeling through deep, multi-format, multi-notation user-defined languages. “Multiformat” refers to seamlessly editing a language in several formats in parallel (e.g. diagrammatic, textual and tabular) while “multi-notation” denotes the ability to mix notations arbitrarily (i.e. to show one part of a model in a general-purpose, UML-like, notation and one part in a domain-specific notation such as BPMN). The deep modeling component of the tool, underpinned by the orthogonal classification architecture and deep instantiation, allows models to contain as many classification levels as needed to concisely represent the domain in hand. This demonstration shows the capabilities of the Melanee tool in the context of defining a language to model the structure of an enterprise.
TL;DR: This paper proposes a business process improvement technique based on ubiquitous computing, and explains how ubiquitous computing positively impacts the performance metrics of business processes, and proposes a specification for designing ubiquitous business processes by extending BPMN.
Abstract: Due to the cut throat competition among organizations, business process improvement is now an everyday activity. A relentless activity that makes business processes more complex than ever. As they get more complex, the improvement rounds become time-consuming, costly and the quality of each outcome is put into jeopardy, which is somehow paradoxical with the concept of improvement. In this paper, we propose a business process improvement technique based on ubiquitous computing. First, we couple business processes with ubiquitous computing and define a ubiquitous business process. Then, we explain how ubiquitous computing positively impacts the performance metrics of business processes. Afterwards, we set a specification for designing ubiquitous business processes by extending BPMN. Finally, we propose a concrete case study about time-banking to corroborate our theory. A comparative study of the same process, in ubiquitous and non-ubiquitous versions, is established. The results clearly illustrate that ubiquitous computing impacts positively the business process performance metrics. Still, the case study corroborates that ubiquitous computing not only improves a business process but also enables it to get improved with the least of human interventions.
01 Jan 2016
TL;DR: In this article, the authors present a process management a guide for the design of business processes, which they call Process Management: A Guide for the Design of Business Processes (PM).
Abstract: Thank you very much for downloading process management a guide for the design of business processes. As you may know, people have search numerous times for their chosen novels like this process management a guide for the design of business processes, but end up in harmful downloads. Rather than enjoying a good book with a cup of coffee in the afternoon, instead they juggled with some harmful virus inside their laptop.
TL;DR: The method permits detection of process criticalities, as well as identifying the best way to measure key performance indicators (KPIs) of BPs and test for potential improvements.
Abstract: Purpose – The purpose of this paper is to provide a method for analysing and improving the operational performance of business processes (BPs). Design/methodology/approach – The method employs two standards, Business Process Modelling Notation (BPMN 2.0) and Business Processes Simulation (BPSim 1.0), to measure key performance indicators (KPIs) of BPs and test for potential improvements. The BP is first modelled in BPMN 2.0. Operational performance can then be measured using BPSim 1.0. The process simulation also enables execution of reliable “what-if” analysis, allowing improvements of the actual processes under study. To confirm the validity of the method the authors provide an application to the healthcare domain, in which the authors conduct several simulation experiments. The case study examines a standardised patient arrival and treatment process in an orthopaedic-emergency room of a public hospital. Findings – The method permits detection of process criticalities, as well as identifying the best co...
TL;DR: This study investigates the requirements for BIM Governance and develops specifications for a cloud-based BIM governance platform (GovernBIM), which aims to provide a computerized solution to facilitate team collaboration and mange generated BIM data during a project’s lifecycle.
Abstract: Utilization of cloud technologies has recently attained a profile in building information modeling (BIM). Many studies have investigated the potential role of cloud in facilitating the use of BIM in the construction domain. In addition, recent studies have focused on the role of cloud in facilitating team collaboration across a building’s lifecycle by applying a BIM governance model. The lack of a suitable means for the governance of collaboration and for the access and archival of data has been cited as the key barrier for the widespread adoption of collaborative BIM environments. This study, therefore, investigates the requirements for BIM governance and develops specifications for a cloud-based BIM governance platform (GovernBIM). The study also uses findings from wide consultation in combination with software engineering approaches using business process model notation (BPMN) and unified modeling language (UML) to define the platform’s requirements and specifications. This platform also aims to provide a computerized solution for overall BIM governance solution to facilitate team collaboration and mange generated BIM data during a project’s lifecycle. This ensures that data is consistent, available, and hosted in a scalable storage environment with high performance computing capabilities. The results from this study (1) define functional, nonfunctional, and domain-specific requirements for developing a GovernBIM platform; (2) develop a set of BPMN diagrams to describe the internal and external business procedures of the GovernBIM platform lifecycle for setting, configuring, managing, and using a GovernBIM platform; (3) evaluate several fundamental UML use cases for the adoption of the GovernBIM platform; (4) present a core BIM governance model (UML class diagram) to present the internal structure of the GovernBIM platform; and (5) provide a well-structured, cloud-based architecture to develop the GovernBIM platform for practical implementation.
Read More: http://ascelibrary.org/doi/10.1061/%28ASCE%29CP.1943-5487.0000539
TL;DR: A formal method for modeling and verification of online shopping business processes with malicious behavior patterns considered based on Petri nets is presented, which can make the software design provably secured from the malicious attacks at process design time and reduces the difficulty and cost of modification for imperfect systems at the release phase.
Abstract: Recently, online shopping integrating third-party payment platforms (TPPs) introduces new security challenges due to complex interactions between Application Programming Interfaces (APIs) of Merchants and TPPs. Malicious clients may exploit security vulnerabilities by calling APIs in an arbitrary order or playing various roles. To deal with the security issue in the early stages of system development, this paper presents a formal method for modeling and verification of online shopping business processes with malicious behavior patterns considered based on Petri nets. We propose a formal model called E-commerce Business Process Net to model a normal online shopping business process that represent intended functions, and malicious behavior patterns representing a potential attack that violates the security goals at the requirement analysis phase. Then, we synthesize the normal business process and malicious behavior patterns by an incremental modeling method. According to the synthetic model, we analyze whether an online shopping business process is resistant to the known malicious behavior patterns. As a result, our approach can make the software design provably secured from the malicious attacks at process design time and, thus, reduces the difficulty and cost of modification for imperfect systems at the release phase. We demonstrate our approach through a case study.