Towards a Security Engineering Process Model for Electronic Business Processes

TL;DR

This paper emphasizes the need for a systematic security engineering process model tailored for electronic business processes within BPM to enhance enterprise security and adaptability.

Contribution

It identifies key requirements for a security engineering process model specifically designed for BPM, addressing a gap in current methodologies.

Findings

Highlights the lack of systematic security support in BPM languages

Proposes key requirements for a security engineering process model

Addresses the need for structured development of secure electronic business processes

Abstract

Business process management (BPM) and accompanying systems aim at enabling enterprises to become adaptive. In spite of the dependency of enterprises on secure business processes, BPM languages and techniques provide only little support for security. Several complementary approaches have been proposed for security in the domain of BPM. Nevertheless, support for a systematic procedure for the development of secure electronic business processes is still missing. In this paper, we pinpoint the need for a security engineering process model in the domain of BPM and identify key requirements for such process model.