{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T17:00:50Z","timestamp":1781110850011,"version":"3.54.1"},"reference-count":27,"publisher":"IGI Global Scientific Publishing","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,4]]},"abstract":"<jats:p>Business process modeling notation (BPMN) is a widely used business model process. The importance of security is apparent, but traditionally, it is considered after the business processes definition. There is a need for integrated tools and a methodology that allows for specifying and enforcing compliance and security requirements for business process-driven enterprise systems. Therefore, it is very important to capture the security requirements at conceptual stage in order to identify the security needs. BPMN is lacking the ability to model and present security concepts. This will increase the vulnerability of the system and make the future development of security for the system more difficult. This article proposes a novel extension to BPMN notation based on cyber security ontologies. The authors incorporate visual constructs for modeling security requirements. In order to provide a commonly usable extension, these enhancements were implemented as BPMN metamodel extension. The authors illustrate capabilities and benefits of extension with a real-life example.<\/jats:p>","DOI":"10.4018\/ijtd.2020040101","type":"journal-article","created":{"date-parts":[[2020,2,28]],"date-time":"2020-02-28T07:39:00Z","timestamp":1582875540000},"page":"1-17","source":"Crossref","is-referenced-by-count":11,"title":["Towards a BPMN Security Extension for the Visualization of Cyber Security Requirements"],"prefix":"10.4018","volume":"11","author":[{"given":"Mohamed El Amine","family":"Chergui","sequence":"first","affiliation":[{"name":"EEDIS Laboratory, University Djilali Liabes, Algeria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7008-7434","authenticated-orcid":true,"given":"Sidi Mohamed","family":"Benslimane","sequence":"additional","affiliation":[{"name":"LabRI-SBA Laboratory, Ecole Superieure en Informatique, Sidi Bel Abbes, Algeria"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"IJTD.2020040101-0","doi-asserted-by":"publisher","DOI":"10.4018\/ijismd.2013100105"},{"key":"IJTD.2020040101-1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31069-0_1"},{"key":"IJTD.2020040101-2","doi-asserted-by":"publisher","DOI":"10.1109\/CBI.2017.37"},{"key":"IJTD.2020040101-3","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-019-00743-y"},{"key":"IJTD.2020040101-4","doi-asserted-by":"crossref","unstructured":"Basin, D., Burri, S. J., & Karjoth, G. (2011). Obstruction-Free Authorization Enforcement: Aligning Security with Business Objectives. In Proceedings of the IEEE 24th Computer Security Foundations Symposium (pp. 99-113). IEEE Press.","DOI":"10.1109\/CSF.2011.14"},{"key":"IJTD.2020040101-5","doi-asserted-by":"publisher","DOI":"10.1287\/isre.12.4.384.9702"},{"key":"IJTD.2020040101-6","first-page":"42","article-title":"Classification of domain-specific BPMN extensions.","author":"R.Braun","year":"2014","journal-title":"IFIP Working Conference on The Practice of Enterprise Modeling"},{"key":"IJTD.2020040101-7","doi-asserted-by":"publisher","DOI":"10.1109\/BIBM.2014.6999261"},{"key":"IJTD.2020040101-8","doi-asserted-by":"crossref","unstructured":"Brucker, A. D., Hang, I., L\u00fcckemeyer, G., & Ruparel, R. (2012). SecureBPMN. In Proceedings of the 17th ACM symposium on Access Control Models and Technologies SACMAT \u201812 (pp. 123-126). ACM Press.","DOI":"10.1145\/2295136.2295160"},{"key":"IJTD.2020040101-9","doi-asserted-by":"publisher","DOI":"10.17705\/1jais.00201"},{"key":"IJTD.2020040101-10","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.72"},{"key":"IJTD.2020040101-11","doi-asserted-by":"crossref","unstructured":"Labda, W., Mehandjiev, N., & Sampaio, P. (2014). Modeling of privacy-aware business processes in BPMN to protect personal data. In Proceedings of the 29th Annual ACM Symposium on Applied Computing SAC \u201814 (pp. 1399-1405). ACM Press.","DOI":"10.1145\/2554850.2555014"},{"key":"IJTD.2020040101-12","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.34"},{"key":"IJTD.2020040101-13","doi-asserted-by":"crossref","unstructured":"Maines, C. L., Llewellyn-Jones, D., Tang, S., & Zhou, B. (2015). A Cyber Security Ontology for BPMN-Security Extensions. In Proceedings of the IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable, Autonomic and Secure Computing (pp. 1756-1763). IEEE Press.","DOI":"10.1109\/CIT\/IUCC\/DASC\/PICOM.2015.265"},{"key":"IJTD.2020040101-14","doi-asserted-by":"crossref","unstructured":"Maines, C. L., Zhou, B., Tang, S., & Shi, Q. (2016). Adding a Third Dimension to BPMN as a Means of Representing Cyber Security Requirements. In Proceedings of the 2016 9th International Conference on Developments in eSystems Engineering (DeSE) (pp. 105-110). Academic Press.","DOI":"10.1109\/DeSE.2016.69"},{"key":"IJTD.2020040101-15","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2009.90"},{"key":"IJTD.2020040101-16","unstructured":"M\u00fclle, J., Stackelberg, S. V., & B\u00f6hm, K. (2011). A Security Language for BPMN Process Models. In Karlsruhe Reports in Informatics. Academic Press."},{"key":"IJTD.2020040101-17","first-page":"1","article-title":"Privacy-enhanced BPMN: Enabling data privacy analysis in business processes models.","author":"P.Pullonen","year":"2019","journal-title":"Software & Systems Modeling"},{"key":"IJTD.2020040101-18","doi-asserted-by":"publisher","DOI":"10.1093\/ietisy\/e90-d.4.745"},{"key":"IJTD.2020040101-19","doi-asserted-by":"crossref","unstructured":"Saleem, M., Jaafar, J., & Hassan, M. (2012). A domain-specific language for modelling security objectives in a business process models of soa applications. International journal on Advances in Information Sciences and Service Sciences, 4(1), 353-362.","DOI":"10.4156\/aiss.vol4.issue1.45"},{"key":"IJTD.2020040101-20","doi-asserted-by":"crossref","unstructured":"Salnitri, M., Dalpiaz, F., & Giorgini, P. (2014). Modeling and Verifying Security Policies in Business Processes. In Enterprise, Business-Process and Information Systems Modeling (pp. 200\u2013214). Springer.","DOI":"10.1007\/978-3-662-43745-2_14"},{"key":"IJTD.2020040101-21","doi-asserted-by":"crossref","unstructured":"Sang, K. S., & Zhou, B. (2015). BPMN Security Extensions for Healthcare Process. In Proceedings of the IEEE International Conference on Computer and Information Technology (pp. 2340-2345). IEEE Press.","DOI":"10.1109\/CIT\/IUCC\/DASC\/PICOM.2015.346"},{"key":"IJTD.2020040101-22","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1007\/978-3-319-10172-9_12","article-title":"Modeling concepts for internal controls in business processes\u2013an empirically grounded extension of BPMN.","author":"M.Schultz","year":"2014","journal-title":"International Conference on Business Process Management"},{"key":"IJTD.2020040101-23","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1007\/978-3-642-25160-3_5","article-title":"Extending BPMN 2.0: method and tool support.","author":"L. J. R.Stroppi","year":"2011","journal-title":"International Workshop on Business Process Modeling Notation"},{"key":"IJTD.2020040101-24","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2008.10.002"},{"key":"IJTD.2020040101-25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-16181-1_78"},{"key":"IJTD.2020040101-26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92624-7_15"}],"container-title":["International Journal of Technology Diffusion"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=250199","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,5]],"date-time":"2022-05-05T16:10:53Z","timestamp":1651767053000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/IJTD.2020040101"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2020,4]]},"references-count":27,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.4018\/ijtd.2020040101","relation":{},"ISSN":["1947-9301","1947-931X"],"issn-type":[{"value":"1947-9301","type":"print"},{"value":"1947-931X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,4]]}}}