Enhancement of a Business Model with a Business Contextual Risk Model - Archive ouverte HAL Access content directly
Conference Papers Year : 2021

Enhancement of a Business Model with a Business Contextual Risk Model

(1, 2, 3, 4) , (1, 3) , (1)
1
2
3
4

Abstract

In this paper, we propose an approach of security risk-driven contextual model for software systems development. The approach is model-driven using enterprise business architecture as the basis for the contextual models definition, associating security risk concerns. Enterprise Architecture (EA) enables the description of an organisation’s structure, its business and its underlying Information System. By using a Model-Driven Engineering (MDE) approach such as Model-Driven Architecture (MDA), we define an architecture for models, and we provide a set of guidelines for structuring specifications expressed as (EA) contextual models. Then these models are enhanced to integrate security aspects in the overall development process. The proposal aims to analyse enterprise security from a business-oriented view and define security requirements inherited by the lower architectures, particularly IS architecture. The approach provides a meta-model of business contextual risk with a security management process, consisting on a systematic method, guiding to risk modelling and risk treatment strategies.
Fichier principal
Vignette du fichier
CRISIS2020-018_v1Enhancement of a business model with a Business Contextual Risk Model.pdf (293.38 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03141542 , version 1 (17-05-2021)

Identifiers

Cite

Zakariya Kamagaté, Jacques Simonin, Yvon Kermarrec. Enhancement of a Business Model with a Business Contextual Risk Model. International Conference on Risks and Security of Internet and Systems, Nov 2020, Paris, France. pp.325-334, ⟨10.1007/978-3-030-68887-5_20⟩. ⟨hal-03141542⟩
83 View
51 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More