@inproceedings{d0025545045d434da2d8e67ac451b2f5,
title = "Modelling quality of protection in outsourced business processes",
abstract = "There is a large number of research papers and standards dedicated to security for outsourced data. Yet, most papers propose new controls to access and protect the data rather than to assess the level of assurance of the whole process that is currently deployed. The main contributions of the paper is an approach for aggregating security properties of individual tasks of a complex business process in order to receive the level of assurance provided by the whole process. The approach takes into account the fact that some tasks of a business process may be outsourced and thus account for not very reliable partners. The approach chooses the concrete business process offering the highest assurance among several possible design alternatives by building an optimal hyperpath traversing the business process. {\textcopyright} 2007 IEEE.",
author = "F. Massacci and A. Yautsiukhin",
year = "2007",
doi = "10.1109/IAS.2007.70",
language = "English",
series = "Proceedings - IAS 2007 3rd Internationl Symposium on Information Assurance and Security",
pages = "247--252",
booktitle = "Proceedings - IAS 2007 3rd Internationl Symposium on Information Assurance and Security",
note = "3rd Internationl Symposium on Information Assurance and Security, IAS 2007 ; Conference date: 20-08-2007 Through 31-08-2007",
}