{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T00:03:31Z","timestamp":1773792211145,"version":"3.50.1"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319929002","type":"print"},{"value":"9783319929019","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-92901-9_19","type":"book-chapter","created":{"date-parts":[[2018,6,6]],"date-time":"2018-06-06T06:27:41Z","timestamp":1528266461000},"page":"218-234","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["From Security-by-Design to the Identification of Security-Critical Deviations in Process Executions"],"prefix":"10.1007","author":[{"given":"Mattia","family":"Salnitri","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mahdi","family":"Alizadeh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniele","family":"Giovanella","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicola","family":"Zannone","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paolo","family":"Giorgini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,6,7]]},"reference":[{"key":"19_CR1","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1016\/j.cose.2017.10.010","volume":"73","author":"M Alizadeh","year":"2017","unstructured":"Alizadeh, M., Lu, X., Fahland, D., Zannone, N., van der Aalst, W.M.P.: Linking data and process perspectives for conformance analysis. Comput. Secur. 73, 172\u2013193 (2017)","journal-title":"Comput. Secur."},{"key":"19_CR2","volume-title":"Security Engineering: A Guide to Building Dependable Distributed Systems","author":"RJ Anderson","year":"2008","unstructured":"Anderson, R.J.: Security Engineering: A Guide to Building Dependable Distributed Systems, 2nd edn. Wiley, Hoboken (2008)","edition":"2"},{"key":"19_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1007\/978-3-642-32885-5_8","volume-title":"Business Process Management","author":"S Banescu","year":"2012","unstructured":"Banescu, S., Petkovi\u0107, M., Zannone, N.: Measuring privacy compliance using fitness metrics. In: Barros, A., Gal, A., Kindler, E. (eds.) BPM 2012. LNCS, vol. 7481, pp. 114\u2013119. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-32885-5_8"},{"issue":"6","key":"19_CR4","doi-asserted-by":"publisher","first-page":"477","DOI":"10.1016\/j.is.2008.02.005","volume":"33","author":"C Beeri","year":"2008","unstructured":"Beeri, C., Eyal, A., Kamenkovich, S., Milo, T.: Querying business processes with BP-QL. Inf. Syst. 33(6), 477\u2013507 (2008)","journal-title":"Inf. Syst."},{"key":"19_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1007\/978-3-642-23059-2_22","volume-title":"Business Process Management","author":"S-M-R Beheshti","year":"2011","unstructured":"Beheshti, S.-M.-R., Benatallah, B., Motahari-Nezhad, H.R., Sakr, S.: A query language for analyzing business processes execution. In: Rinderle-Ma, S., Toumani, F., Wolf, K. (eds.) BPM 2011. LNCS, vol. 6896, pp. 281\u2013297. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23059-2_22"},{"issue":"11","key":"19_CR6","doi-asserted-by":"publisher","first-page":"5340","DOI":"10.1016\/j.eswa.2014.03.010","volume":"41","author":"D Borrego","year":"2014","unstructured":"Borrego, D., Barba, I.: Conformance checking and diagnosis for declarative business process models in data-aware scenarios. Expert Syst. Appl. 41(11), 5340\u20135352 (2014)","journal-title":"Expert Syst. Appl."},{"key":"19_CR7","doi-asserted-by":"publisher","unstructured":"BPI Challenge 2012: Event log of a loan application process (2012). https:\/\/doi.org\/10.4121\/uuid:3926db30-f712-4394-aebc-75976070e91f","DOI":"10.4121\/uuid:3926db30-f712-4394-aebc-75976070e91f"},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Brucker, A.D., Hang, I., L\u00fcckemeyer, G., Ruparel, R.: SecureBPMN: modeling and enforcing access control requirements in business processes. In: SACMAT, pp. 123\u2013126. ACM (2012)","DOI":"10.1145\/2295136.2295160"},{"key":"19_CR9","doi-asserted-by":"publisher","first-page":"194","DOI":"10.1016\/j.eswa.2016.08.040","volume":"65","author":"A Burattin","year":"2016","unstructured":"Burattin, A., Maggi, F.M., Sperduti, A.: Conformance checking based on multi-perspective declarative process models. Expert Syst. Appl. 65, 194\u2013211 (2016)","journal-title":"Expert Syst. Appl."},{"key":"19_CR10","series-title":"Lecture Notes in Business Information Processing","doi-asserted-by":"publisher","first-page":"134","DOI":"10.1007\/978-3-642-00328-8_13","volume-title":"Business Process Management Workshops","author":"F Chesani","year":"2009","unstructured":"Chesani, F., Mello, P., Montali, M., Riguzzi, F., Sebastianis, M., Storari, S.: Checking compliance of execution traces to business rules. In: Ardagna, D., Mecella, M., Yang, J. (eds.) BPM 2008. LNBIP, vol. 17, pp. 134\u2013145. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-00328-8_13"},{"key":"19_CR11","doi-asserted-by":"crossref","unstructured":"De Masellis, R., Maggi, F.M., Montali, M.: Monitoring data-aware business constraints with finite state automata. In: ICSSP, pp. 134\u2013143. ACM (2014)","DOI":"10.1145\/2600821.2600835"},{"key":"19_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"453","DOI":"10.1007\/978-3-319-06701-8_44","volume-title":"Advancing the Impact of Design Science: Moving from Theory to Practice","author":"P Delfmann","year":"2014","unstructured":"Delfmann, P., Dietrich, H.-A., Havel, J.-M., Steinhorst, M.: A language-independent model query tool. In: Tremblay, M.C., VanderMeer, D., Rothenberger, M., Gupta, A., Yoon, V. (eds.) DESRIST 2014. LNCS, vol. 8463, pp. 453\u2013457. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-06701-8_44"},{"key":"19_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1007\/3-540-65306-6_15","volume-title":"Lectures on Petri Nets I: Basic Models","author":"J Desel","year":"1998","unstructured":"Desel, J., Reisig, W.: Place\/transition Petri nets. In: Reisig, W., Rozenberg, G. (eds.) ACPN 1996. LNCS, vol. 1491, pp. 122\u2013173. Springer, Heidelberg (1998). https:\/\/doi.org\/10.1007\/3-540-65306-6_15"},{"issue":"12","key":"19_CR14","doi-asserted-by":"publisher","first-page":"1281","DOI":"10.1016\/j.infsof.2008.02.006","volume":"50","author":"RM Dijkman","year":"2008","unstructured":"Dijkman, R.M., Dumas, M., Ouyang, C.: Semantics and analysis of business process models in BPMN. Inf. Softw. Technol. 50(12), 1281\u20131294 (2008)","journal-title":"Inf. Softw. Technol."},{"key":"19_CR15","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1016\/j.is.2013.12.007","volume":"47","author":"D Fahland","year":"2014","unstructured":"Fahland, D., van der Aalst, W.M.P.: Model repair - aligning process models to reality. Inf. Syst. 47, 220\u2013243 (2014)","journal-title":"Inf. Syst."},{"key":"19_CR16","series-title":"Lecture Notes in Business Information Processing","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/978-3-319-02922-1_2","volume-title":"Asia Pacific Business Process Management","author":"AHM ter Hofstede","year":"2013","unstructured":"ter Hofstede, A.H.M., Ouyang, C., La Rosa, M., Song, L., Wang, J., Polyvyanyy, A.: APQL: a process-model query language. In: Song, M., Wynn, M.T., Liu, J. (eds.) AP-BPM 2013. LNBIP, vol. 159, pp. 23\u201338. Springer, Cham (2013). https:\/\/doi.org\/10.1007\/978-3-319-02922-1_2"},{"issue":"2","key":"19_CR17","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/1237500.1237501","volume":"10","author":"N Li","year":"2007","unstructured":"Li, N., Tripunitara, M.V., Bizri, Z.: On mutually exclusive roles and separation-of-duty. ACM Trans. Inf. Syst. Secur. 10(2), 5 (2007)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"issue":"01","key":"19_CR18","first-page":"1440003","volume":"23","author":"FM Maggi","year":"2014","unstructured":"Maggi, F.M., Westergaard, M.: Using timed automata for a priori warnings and planning for timed declarative process models. IJCIS 23(01), 1440003 (2014)","journal-title":"IJCIS"},{"issue":"1","key":"19_CR19","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1145\/1658373.1658376","volume":"4","author":"M Montali","year":"2010","unstructured":"Montali, M., Pesic, M., van der Aalst, W.M.P., Chesani, F., Mello, P., Storari, S.: Declarative specification and verification of service choreographiess. TWEB 4(1), 3 (2010)","journal-title":"TWEB"},{"key":"19_CR20","unstructured":"OASIS: Web Services Business Process Execution Language, April 2007. http:\/\/docs.oasis-open.org\/wsbpel\/2.0\/wsbpel-v2.0.html"},{"key":"19_CR21","unstructured":"OASIS: eXtensible Access Control Markup Language (XACML)Version 3.0, January 2013. http:\/\/docs.oasis-open.org\/xacml\/3.0\/xacml-3.0-core-spec-os-en.html"},{"key":"19_CR22","unstructured":"OMG: BPMN 2.0, January 2011"},{"key":"19_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1007\/978-3-642-23556-6_10","volume-title":"Secure Data Management","author":"M Petkovi\u0107","year":"2011","unstructured":"Petkovi\u0107, M., Prandi, D., Zannone, N.: Purpose control: did you process the data for the intended purpose? In: Jonker, W., Petkovi\u0107, M. (eds.) SDM 2011. LNCS, vol. 6933, pp. 145\u2013168. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23556-6_10"},{"key":"19_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"237","DOI":"10.1007\/978-3-662-45563-0_14","volume-title":"On the Move to Meaningful Internet Systems: OTM 2014 Conferences","author":"ER Taghiabadi","year":"2014","unstructured":"Taghiabadi, E.R., Gromov, V., Fahland, D., van der Aalst, W.M.P.: Compliance checking of data-aware and resource-aware compliance requirements. In: Meersman, R., Panetto, H., Dillon, T., Missikoff, M., Liu, L., Pastor, O., Cuzzocrea, A., Sellis, T. (eds.) OTM 2014. LNCS, vol. 8841, pp. 237\u2013257. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-45563-0_14"},{"issue":"1","key":"19_CR25","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1016\/j.is.2007.07.001","volume":"33","author":"A Rozinat","year":"2008","unstructured":"Rozinat, A., van der Aalst, W.M.P.: Conformance checking of processes based on monitoring real behavior. Inf. Syst. 33(1), 64\u201395 (2008)","journal-title":"Inf. Syst."},{"key":"19_CR26","doi-asserted-by":"crossref","unstructured":"Salnitri, M., Paja, E., Giorgini, P.: Maintaining secure business processes in light of socio-technical systems\u2019 evolution. In: RE Conference Workshops, pp. 155\u2013164. IEEE (2016)","DOI":"10.1109\/REW.2016.038"},{"key":"19_CR27","unstructured":"Salnitri, M., Paja, E., Poggianella, M., Giorgini, P.: STS-Tool 3.0: maintaining security in socio-technical systems. In: Proceedings of the CAiSE Forum, pp. 205\u2013212 (2015)"},{"issue":"1","key":"19_CR28","doi-asserted-by":"publisher","first-page":"51","DOI":"10.2753\/MIS0742-1222230102","volume":"23","author":"S Sarker","year":"2006","unstructured":"Sarker, S., Sarker, S., Sidorova, A.: Understanding business process change failure: an actor-network perspective. J. Manag. Inf. Syst. 23(1), 51\u201386 (2006)","journal-title":"J. Manag. Inf. Syst."},{"key":"19_CR29","doi-asserted-by":"crossref","unstructured":"Simon, R., Zurko, M.: Separation of duty in role-based environments. In: Proceedings of the Computer Security Foundations Workshop, pp. 183\u2013194 (1997)","DOI":"10.1109\/CSFW.1997.596811"},{"key":"19_CR30","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1016\/j.jvlc.2010.11.004","volume":"22","author":"H St\u00f6rrle","year":"2011","unstructured":"St\u00f6rrle, H.: VMQL: a visual language for ad-hoc model querying. J. Vis. Lang. Comput. 22, 3\u201329 (2011)","journal-title":"J. Vis. Lang. Comput."},{"key":"19_CR31","unstructured":"The Apache Software Foundation: Apache Rampart website. http:\/\/axis.apache.org\/axis2\/java\/rampart\/. Accessed April 2016"},{"key":"19_CR32","doi-asserted-by":"publisher","first-page":"37 p.","DOI":"10.1155\/2013\/507984","volume":"2013","author":"WMP van der Aalst","year":"2013","unstructured":"van der Aalst, W.M.P.: Business process management: a comprehensive survey. ISRN Softw. Eng. 2013, 37 p. (2013). https:\/\/doi.org\/10.1155\/2013\/507984. Article ID 507984","journal-title":"ISRN Softw. Eng."},{"issue":"2","key":"19_CR33","doi-asserted-by":"publisher","first-page":"182","DOI":"10.1002\/widm.1045","volume":"2","author":"WMP van der Aalst","year":"2012","unstructured":"van der Aalst, W.M.P., Adriansyah, A., van Dongen, B.: Replaying history on process models for conformance checking and performance analysis. Wiley Int. Rev. Data Min. Knowl. Disc. 2(2), 182\u2013192 (2012)","journal-title":"Wiley Int. Rev. Data Min. Knowl. Disc."},{"key":"19_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"130","DOI":"10.1007\/11575771_11","volume-title":"On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE","author":"WMP van der Aalst","year":"2005","unstructured":"van der Aalst, W.M.P., de Beer, H.T., van Dongen, B.F.: Process mining and verification of properties: an approach based on temporal logic. In: Meersman, R., Tari, Z. (eds.) OTM 2005. LNCS, vol. 3760, pp. 130\u2013147. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11575771_11"},{"issue":"1","key":"19_CR35","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1022883727209","volume":"14","author":"WMP van der Aalst","year":"2003","unstructured":"van der Aalst, W.M.P., Ter Hofstede, A.H., Kiepuszewski, B., Barros, A.P.: Workflow patterns. Distrib. Parallel Databases 14(1), 5\u201351 (2003)","journal-title":"Distrib. Parallel Databases"},{"issue":"1","key":"19_CR36","doi-asserted-by":"crossref","first-page":"103","DOI":"10.3233\/FI-2014-1006","volume":"131","author":"WMP van der Aalst","year":"2014","unstructured":"van der Aalst, W.M.P., Verbeek, H.: Process discovery and conformance checking using passages. Fundamenta Informaticae 131(1), 103\u2013138 (2014)","journal-title":"Fundamenta Informaticae"},{"issue":"4","key":"19_CR37","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1016\/j.sysarc.2008.10.002","volume":"55","author":"C Wolter","year":"2009","unstructured":"Wolter, C., Menzel, M., Schaad, A., Miseldine, P., Meinel, C.: Model-driven business process security requirement specification. J. Syst. Architect. 55(4), 211\u2013223 (2009)","journal-title":"J. Syst. Architect."}],"container-title":["Lecture Notes in Business Information Processing","Information Systems in the Big Data Era"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-92901-9_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,5]],"date-time":"2025-07-05T00:17:46Z","timestamp":1751674666000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-92901-9_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319929002","9783319929019"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-92901-9_19","relation":{},"ISSN":["1865-1348","1865-1356"],"issn-type":[{"value":"1865-1348","type":"print"},{"value":"1865-1356","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"7 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CAiSE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advanced Information Systems Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tallinn","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Estonia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 June 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 June 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"caise2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/caise2018.ut.ee","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}