Enhancement of a Business Model with a Business Contextual Risk Model - IMT Atlantique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Enhancement of a Business Model with a Business Contextual Risk Model

Résumé

In this paper, we propose an approach of security risk-driven contextual model for software systems development. The approach is model-driven using enterprise business architecture as the basis for the contextual models definition, associating security risk concerns. Enterprise Architecture (EA) enables the description of an organisation’s structure, its business and its underlying Information System. By using a Model-Driven Engineering (MDE) approach such as Model-Driven Architecture (MDA), we define an architecture for models, and we provide a set of guidelines for structuring specifications expressed as (EA) contextual models. Then these models are enhanced to integrate security aspects in the overall development process. The proposal aims to analyse enterprise security from a business-oriented view and define security requirements inherited by the lower architectures, particularly IS architecture. The approach provides a meta-model of business contextual risk with a security management process, consisting on a systematic method, guiding to risk modelling and risk treatment strategies.
Fichier principal
Vignette du fichier
CRISIS2020-018_v1Enhancement of a business model with a Business Contextual Risk Model.pdf (293.38 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03141542 , version 1 (17-05-2021)

Identifiants

Citer

Zakariya Kamagaté, Jacques Simonin, Yvon Kermarrec. Enhancement of a Business Model with a Business Contextual Risk Model. International Conference on Risks and Security of Internet and Systems, Nov 2020, Paris, France. pp.325-334, ⟨10.1007/978-3-030-68887-5_20⟩. ⟨hal-03141542⟩
114 Consultations
77 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More