Grupo Alarcos · Conference paper · 2015
Eliciting Security Requirements for Business Processes of Legacy Systems
Haralambos Mouratidis, Andrew Fish, David García Rosado, Ignacio García Rodríguez de Guzmán, Eduardo Fernández-Medina Patón
The modernisation of enterprise legacy systems, without compromises in their functionality, is a demanding and time consuming endeavour. To retain the underlying business behaviour during their modernisation, the MARBLE^TM framework has been developed for the extraction of business process models from their source code. Building on top of that work, in this paper we propose an integrated approach for transforming the extracted legacy process models into Secure Tropos goal models. Such models facilitate the elicitation of security requirements in a high level of abstraction, which are then incorporated back into the process models of the modernised systems as security features. Therefore high level models can be derived from legacy source code with minimal manual intervention, where security can be elaborated by non-technical stakeholders in alignment with organisational objectives.
On the same topic
- 2005 Towards an integration of Security Requirements into Business Process Modeling
- 2006 Capturing Security Requirements in Business Processes Through a UML 2.0 Activity Diagrams Profile
- 2007 Analysis-Level Classes from Secure Business Processes Through Model Transformations
- 2010 On the use of patterns to recover business processes