TY - GEN
T1 - Modelling quality of protection in outsourced business processes
AU - Massacci, F.
AU - Yautsiukhin, A.
PY - 2007
Y1 - 2007
N2 - There is a large number of research papers and standards dedicated to security for outsourced data. Yet, most papers propose new controls to access and protect the data rather than to assess the level of assurance of the whole process that is currently deployed. The main contributions of the paper is an approach for aggregating security properties of individual tasks of a complex business process in order to receive the level of assurance provided by the whole process. The approach takes into account the fact that some tasks of a business process may be outsourced and thus account for not very reliable partners. The approach chooses the concrete business process offering the highest assurance among several possible design alternatives by building an optimal hyperpath traversing the business process. © 2007 IEEE.
AB - There is a large number of research papers and standards dedicated to security for outsourced data. Yet, most papers propose new controls to access and protect the data rather than to assess the level of assurance of the whole process that is currently deployed. The main contributions of the paper is an approach for aggregating security properties of individual tasks of a complex business process in order to receive the level of assurance provided by the whole process. The approach takes into account the fact that some tasks of a business process may be outsourced and thus account for not very reliable partners. The approach chooses the concrete business process offering the highest assurance among several possible design alternatives by building an optimal hyperpath traversing the business process. © 2007 IEEE.
UR - https://www.scopus.com/pages/publications/46749114820
UR - https://www.scopus.com/inward/citedby.url?scp=46749114820&partnerID=8YFLogxK
U2 - 10.1109/IAS.2007.70
DO - 10.1109/IAS.2007.70
M3 - Conference contribution
T3 - Proceedings - IAS 2007 3rd Internationl Symposium on Information Assurance and Security
SP - 247
EP - 252
BT - Proceedings - IAS 2007 3rd Internationl Symposium on Information Assurance and Security
T2 - 3rd Internationl Symposium on Information Assurance and Security, IAS 2007
Y2 - 20 August 2007 through 31 August 2007
ER -