Naved Ahmed "Deriving Security Requirements from Business Process Models" | University of Tartu

Contacts of UT units

Faculty of Arts and Humanities
Faculty phone: 
+372 737 5341
Faculty address: 
Jakobi 2, rooms 116–121, 51005 Tartu
  • Dean's Office
    Faculty phone: 
    + 372 737 5341
    Faculty address: 
    Jakobi 2, rooms 116–121, 51005 Tartu
  • Institute of History and Archaeology
    Faculty phone: 
    +372 737 5651
    Faculty address: 
    Jakobi 2, 51005 Tartu
  • Institute of Estonian and General Linguistics
    Faculty phone: 
    +372 737 5221
    Faculty address: 
    Jakobi 2, 51005 Tartu
  • Institute of Philosophy and Semiotics
    Faculty phone: 
    +372 737 5314
    Faculty address: 
    Jakobi 2, rooms 309–352, 51005 Tartu
  • Institute of Cultural Research
    Faculty phone: 
    (+372) 737 5223
    Faculty address: 
    Ülikooli 16, 51003 Tartu
  • School of Theology and Religious Studies
    Faculty phone: 
    +372 737 5301
    Faculty address: 
    Ülikooli 18–310, 50090 Tartu
  • College of Foreign Languages and Cultures
    Faculty address: 
    Lossi 3, 51003 Tartu
  • Viljandi Culture Academy
    Faculty phone: 
    +372 435 5232
    Faculty address: 
    Posti 1, 71004 Viljandi
Faculty of Social Sciences
Faculty phone: 
+372 737 5957
Faculty address: 
Lossi 36, 51003 Tartu
  • Dean's Office
    Faculty phone: 
    + 372 737 5900
    Faculty address: 
    Lossi 36, 51003 Tartu
  • Institute of Education
    Faculty phone: 
    +372 737 6440
    Faculty address: 
    Salme 1a–29, 50103 Tartu
  • Johan Skytte Institute of Political Studies
    Faculty phone: 
    +372 737 5582
    Faculty address: 
    Lossi 36–301, 51003 Tartu
  • School of Economics and Business Administration
    Faculty phone: 
    +372 737 6310
    Faculty address: 
    J. Liivi 4, 50409 Tartu
  • Institute of Psychology
    Faculty phone: 
    +372 737 5902
    Faculty address: 
    Näituse 2, 50409 Tartu
  • School of Law
    Faculty phone: 
    +372 737 5390
    Faculty address: 
    Näituse 20–324, 50409 Tartu
  • Institute of Social Studies
    Faculty phone: 
    +372 737 5188
    Faculty address: 
    Lossi 36, 51003 Tartu
  • Narva College
    Faculty phone: 
    +372 740 1900
    Faculty address: 
    Raekoja plats 2, 20307 Narva
  • Pärnu College
    Faculty phone: 
    +372 445 0520
    Faculty address: 
    Ringi 35, 80012 Pärnu
Faculty of Medicine
Faculty phone: 
+372 737 5326
Faculty address: 
Ravila 19, 50411 Tartu
  • Dean's Office
    Faculty phone: 
    +372 737 5326
    Faculty address: 
    Ravila 19, 50411 Tartu
  • Institute of Biomedicine and Translational Medicine
    Faculty phone: 
    +372 737 4210
    Faculty address: 
    Biomeedikum, Ravila 19, 50411 Tartu
  • Institute of Pharmacy
    Faculty phone: 
    +372 737 5286
    Faculty address: 
    Nooruse 1, 50411 Tartu
  • Institute of Dentistry
    Faculty phone: 
    +372 731 9856
    Faculty address: 
    Raekoja plats 6, 51003 Tartu
  • Institute of Clinical Medicine
    Faculty phone: 
    +372 737 5323
    Faculty address: 
    L. Puusepa 8, 50406 Tartu
  • Institute of Family Medicine and Public Health
    Faculty phone: 
    +372 737 4190
    Faculty address: 
    Ravila 19, 50411 Tartu
  • Institute of Sport Sciences and Physiotherapy
    Faculty phone: 
    +372 737 5360
    Faculty address: 
    Jakobi 5–205, 51005 Tartu
Faculty of Science and Technology
Faculty phone: 
+372 737 5820
Faculty address: 
Vanemuise 46–208, 51014 Tartu
  • Dean's Office
    Faculty phone: 
    +372 737 5820
    Faculty address: 
    Vanemuise 46–208, 51005 Tartu
  • Institute of Computer Science
    Faculty phone: 
    +372 737 5445
    Faculty address: 
    J. Liivi 2, 50409 Tartu
  • Estonian Marine Institute
    Faculty phone: 
    +372 671 8902
    Faculty address: 
    Mäealuse 14, 12618 Tallinn
  • Institute of Physics
    Faculty address: 
    W. Ostwaldi 1, 50411 Tartu
  • Institute of Chemistry
    Faculty phone: 
    +372 737 5261
    Faculty address: 
    Ravila 14a, 50411 Tartu
  • Institute of Mathematics and Statistics
    Faculty phone: 
    +372 737 5860
    Faculty address: 
    J. Liivi 2, 50409 Tartu
  • Institute of Molecular and Cell Biology
    Faculty phone: 
    +372 737 5011
    Faculty address: 
    Riia 23, 23b–134, 51010 Tartu
  • Tartu Observatory
    Faculty phone: 
    +372 737 4510
    Faculty address: 
    Observatooriumi 1, Tõravere, 61602 Tartumaa
  • Institute of Technology
    Faculty phone: 
    +372 737 4800
    Faculty address: 
    Nooruse 1, 50411 Tartu
  • Institute of Ecology and Earth Sciences
    Faculty phone: 
    +372 737 5835
    Faculty address: 
    Vanemuise 46, 51003 Tartu
Institutions
  • Library
    Faculty phone: 
    +372 737 5702
    Faculty address: 
    W. Struve 1, 50091 Tartu
  • Youth Academy
    Faculty phone: 
    +372 737 5581
    Faculty address: 
    Uppsala 10, 51003 Tartu
  • Institute of Genomics
    Faculty phone: 
    +372 737 4000
    Faculty address: 
    Riia 23b, 51010 Tartu
  • Museum
    Faculty phone: 
    +372 737 5674
    Faculty address: 
    Lossi 25, 51003 Tartu
  • University of Tartu Natural History Museum and Botanical Garden
    Faculty phone: 
    +372 737 6076
    Faculty address: 
    Vanemuise 46, 51003 Tartu
Support Units
  • Administrative Office
    Faculty phone: 
    +372 737 5606
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Centre for Entrepreneurship and Innovation
    Faculty phone: 
    +372 737 6339
    Faculty address: 
    Lossi 3, III floor, 51003 Tartu
  • University Office in Tallinn
    Faculty phone: 
    +372 737 6600
    Faculty address: 
    Teatri väljak 3, 10143 Tallinn
  • Estates Office
    Faculty phone: 
    +372 737 5137
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Finance Office
    Faculty phone: 
    +372 737 5125
    Faculty address: 
    Jakobi 4, 51005 Tartu
  • Grant Office
    Faculty phone: 
    +372 737 6215
    Faculty address: 
    Lossi 3, III floor, 51003 Tartu
  • Information Technology Office
    Faculty phone: 
    +372 737 6000, IT-help: +372 737 5500
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Human Resources Office
    Faculty phone: 
    +372 737 5145
    Faculty address: 
    Ülikooli 18, rooms 302 and 304, 50090 Tartu
  • Internal Audit Office
    Faculty address: 
    Ülikooli 17–103, 51005 Tartu
  • Marketing and Communication Office
    Faculty phone: 
    +372 737 5687
    Faculty address: 
    Ülikooli 18, rooms 102, 104, 209, 210, 50090 Tartu
  • Office of Academic Affairs
    Faculty phone: 
    +372 737 5620
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • Procurement Office
    Faculty phone: 
    +372 737 6632
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Rector's Strategy Office
    Faculty phone: 
    +372 737 5600
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • Student Council
    Faculty phone: 
    +372 737 5400
    Faculty address: 
    Ülikooli 18b, 51005 Tartu
  • University of Tartu Press
    Faculty phone: 
    +372 737 5945
    Faculty address: 
    W. Struve 1, 50091 Tartu
Other Units
  • University of Tartu Academic Sports Club
    Faculty phone: 
    +372 737 5371
    Faculty address: 
    Ujula 4, 51008 Tartu
  • Tartu Student Village
    Faculty phone: 
    +372 740 9959
    Faculty address: 
    Narva mnt 25, 51013 Tartu
  • Tartu Students’ Club
    Faculty phone: 
    +372 730 2400
    Faculty address: 
    Kalevi 24, 51010 Tartu
  • Tartu University Hospital
    Faculty address: 
    L. Puusepa 1a, 50406 Tartu
  • University of Tartu Foundation
    Faculty phone: 
    +372 737 5852
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • View all other units

Contacts of UT units

Faculty of Arts and Humanities
Faculty phone: 
+372 737 5341
Faculty address: 
Jakobi 2, rooms 116–121, 51005 Tartu
  • Dean's Office
    Faculty phone: 
    + 372 737 5341
    Faculty address: 
    Jakobi 2, rooms 116–121, 51005 Tartu
  • Institute of History and Archaeology
    Faculty phone: 
    +372 737 5651
    Faculty address: 
    Jakobi 2, 51005 Tartu
  • Institute of Estonian and General Linguistics
    Faculty phone: 
    +372 737 5221
    Faculty address: 
    Jakobi 2, 51005 Tartu
  • Institute of Philosophy and Semiotics
    Faculty phone: 
    +372 737 5314
    Faculty address: 
    Jakobi 2, rooms 309–352, 51005 Tartu
  • Institute of Cultural Research
    Faculty phone: 
    (+372) 737 5223
    Faculty address: 
    Ülikooli 16, 51003 Tartu
  • School of Theology and Religious Studies
    Faculty phone: 
    +372 737 5301
    Faculty address: 
    Ülikooli 18–310, 50090 Tartu
  • College of Foreign Languages and Cultures
    Faculty address: 
    Lossi 3, 51003 Tartu
  • Viljandi Culture Academy
    Faculty phone: 
    +372 435 5232
    Faculty address: 
    Posti 1, 71004 Viljandi
Faculty of Social Sciences
Faculty phone: 
+372 737 5957
Faculty address: 
Lossi 36, 51003 Tartu
  • Dean's Office
    Faculty phone: 
    + 372 737 5900
    Faculty address: 
    Lossi 36, 51003 Tartu
  • Institute of Education
    Faculty phone: 
    +372 737 6440
    Faculty address: 
    Salme 1a–29, 50103 Tartu
  • Johan Skytte Institute of Political Studies
    Faculty phone: 
    +372 737 5582
    Faculty address: 
    Lossi 36–301, 51003 Tartu
  • School of Economics and Business Administration
    Faculty phone: 
    +372 737 6310
    Faculty address: 
    J. Liivi 4, 50409 Tartu
  • Institute of Psychology
    Faculty phone: 
    +372 737 5902
    Faculty address: 
    Näituse 2, 50409 Tartu
  • School of Law
    Faculty phone: 
    +372 737 5390
    Faculty address: 
    Näituse 20–324, 50409 Tartu
  • Institute of Social Studies
    Faculty phone: 
    +372 737 5188
    Faculty address: 
    Lossi 36, 51003 Tartu
  • Narva College
    Faculty phone: 
    +372 740 1900
    Faculty address: 
    Raekoja plats 2, 20307 Narva
  • Pärnu College
    Faculty phone: 
    +372 445 0520
    Faculty address: 
    Ringi 35, 80012 Pärnu
Faculty of Medicine
Faculty phone: 
+372 737 5326
Faculty address: 
Ravila 19, 50411 Tartu
  • Dean's Office
    Faculty phone: 
    +372 737 5326
    Faculty address: 
    Ravila 19, 50411 Tartu
  • Institute of Biomedicine and Translational Medicine
    Faculty phone: 
    +372 737 4210
    Faculty address: 
    Biomeedikum, Ravila 19, 50411 Tartu
  • Institute of Pharmacy
    Faculty phone: 
    +372 737 5286
    Faculty address: 
    Nooruse 1, 50411 Tartu
  • Institute of Dentistry
    Faculty phone: 
    +372 731 9856
    Faculty address: 
    Raekoja plats 6, 51003 Tartu
  • Institute of Clinical Medicine
    Faculty phone: 
    +372 737 5323
    Faculty address: 
    L. Puusepa 8, 50406 Tartu
  • Institute of Family Medicine and Public Health
    Faculty phone: 
    +372 737 4190
    Faculty address: 
    Ravila 19, 50411 Tartu
  • Institute of Sport Sciences and Physiotherapy
    Faculty phone: 
    +372 737 5360
    Faculty address: 
    Jakobi 5–205, 51005 Tartu
Faculty of Science and Technology
Faculty phone: 
+372 737 5820
Faculty address: 
Vanemuise 46–208, 51014 Tartu
  • Dean's Office
    Faculty phone: 
    +372 737 5820
    Faculty address: 
    Vanemuise 46–208, 51005 Tartu
  • Institute of Computer Science
    Faculty phone: 
    +372 737 5445
    Faculty address: 
    J. Liivi 2, 50409 Tartu
  • Estonian Marine Institute
    Faculty phone: 
    +372 671 8902
    Faculty address: 
    Mäealuse 14, 12618 Tallinn
  • Institute of Physics
    Faculty address: 
    W. Ostwaldi 1, 50411 Tartu
  • Institute of Chemistry
    Faculty phone: 
    +372 737 5261
    Faculty address: 
    Ravila 14a, 50411 Tartu
  • Institute of Mathematics and Statistics
    Faculty phone: 
    +372 737 5860
    Faculty address: 
    J. Liivi 2, 50409 Tartu
  • Institute of Molecular and Cell Biology
    Faculty phone: 
    +372 737 5011
    Faculty address: 
    Riia 23, 23b–134, 51010 Tartu
  • Tartu Observatory
    Faculty phone: 
    +372 737 4510
    Faculty address: 
    Observatooriumi 1, Tõravere, 61602 Tartumaa
  • Institute of Technology
    Faculty phone: 
    +372 737 4800
    Faculty address: 
    Nooruse 1, 50411 Tartu
  • Institute of Ecology and Earth Sciences
    Faculty phone: 
    +372 737 5835
    Faculty address: 
    Vanemuise 46, 51003 Tartu
Institutions
  • Library
    Faculty phone: 
    +372 737 5702
    Faculty address: 
    W. Struve 1, 50091 Tartu
  • Youth Academy
    Faculty phone: 
    +372 737 5581
    Faculty address: 
    Uppsala 10, 51003 Tartu
  • Institute of Genomics
    Faculty phone: 
    +372 737 4000
    Faculty address: 
    Riia 23b, 51010 Tartu
  • Museum
    Faculty phone: 
    +372 737 5674
    Faculty address: 
    Lossi 25, 51003 Tartu
  • University of Tartu Natural History Museum and Botanical Garden
    Faculty phone: 
    +372 737 6076
    Faculty address: 
    Vanemuise 46, 51003 Tartu
Support Units
  • Administrative Office
    Faculty phone: 
    +372 737 5606
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Centre for Entrepreneurship and Innovation
    Faculty phone: 
    +372 737 6339
    Faculty address: 
    Lossi 3, III floor, 51003 Tartu
  • University Office in Tallinn
    Faculty phone: 
    +372 737 6600
    Faculty address: 
    Teatri väljak 3, 10143 Tallinn
  • Estates Office
    Faculty phone: 
    +372 737 5137
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Finance Office
    Faculty phone: 
    +372 737 5125
    Faculty address: 
    Jakobi 4, 51005 Tartu
  • Grant Office
    Faculty phone: 
    +372 737 6215
    Faculty address: 
    Lossi 3, III floor, 51003 Tartu
  • Information Technology Office
    Faculty phone: 
    +372 737 6000, IT-help: +372 737 5500
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Human Resources Office
    Faculty phone: 
    +372 737 5145
    Faculty address: 
    Ülikooli 18, rooms 302 and 304, 50090 Tartu
  • Internal Audit Office
    Faculty address: 
    Ülikooli 17–103, 51005 Tartu
  • Marketing and Communication Office
    Faculty phone: 
    +372 737 5687
    Faculty address: 
    Ülikooli 18, rooms 102, 104, 209, 210, 50090 Tartu
  • Office of Academic Affairs
    Faculty phone: 
    +372 737 5620
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • Procurement Office
    Faculty phone: 
    +372 737 6632
    Faculty address: 
    Ülikooli 18a, 51005 Tartu
  • Rector's Strategy Office
    Faculty phone: 
    +372 737 5600
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • Student Council
    Faculty phone: 
    +372 737 5400
    Faculty address: 
    Ülikooli 18b, 51005 Tartu
  • University of Tartu Press
    Faculty phone: 
    +372 737 5945
    Faculty address: 
    W. Struve 1, 50091 Tartu
Other Units
  • University of Tartu Academic Sports Club
    Faculty phone: 
    +372 737 5371
    Faculty address: 
    Ujula 4, 51008 Tartu
  • Tartu Student Village
    Faculty phone: 
    +372 740 9959
    Faculty address: 
    Narva mnt 25, 51013 Tartu
  • Tartu Students’ Club
    Faculty phone: 
    +372 730 2400
    Faculty address: 
    Kalevi 24, 51010 Tartu
  • Tartu University Hospital
    Faculty address: 
    L. Puusepa 1a, 50406 Tartu
  • University of Tartu Foundation
    Faculty phone: 
    +372 737 5852
    Faculty address: 
    Ülikooli 18, 50090 Tartu
  • View all other units

Naved Ahmed "Deriving Security Requirements from Business Process Models"

Date: 
16.12.2014 - 16:15 to 17:45

Thesis supervisors:
Assoc. Prof. PhD. Raimundas Matulevicius, University of Tartu
Prof. PhD. Marlon Dumas, University of Tartu

Opponents:
Prof. PhD. Andreas L. Opdahl, University of Bergen, Norway
Assoc. Prof. PhD. Rafael Accorsi, University of Freiburg, Germany

Summary:
Any given enterprise produces some value that is for the benefit of its customers. An enterprise can reach its business goals in an efficient and effective manner only if individuals and other enterprise resources, such as information systems, play together well. Business processes are an important concept to facilitating this effective collaboration.

These business processes are described with models that are called business process models. In recent years, modeling of these business process models has received considerable attention. This is due to the fact that information systems increasingly being designed to support business processes. Moreover, given the dynamic business environment that the digital economy has brought about, enterprises need to continuously evolve their business processes and supporting information systems in order to cope with market changes and to take advantage of technology innovations.

This phenomenon increases the need for appropriate information security in business processes. Nowadays, the importance of security has gone far away from just ensuring the business continuity or protecting enterprise's assets; some authors claim security to be the driving force to do business at all. The major problems in existing methods for addressing security analysis are that, these approaches focuses on the implementation of security controls, and leaving behind the rationale for security. Similarly, the requirements elicitation is either missing or haphazard, this leads to miss some critical security requirements; and due to the dynamic and complicated nature of business processes the studies only addresses varying aspects but not the overall security of business processes.

To consider this need, the approach taken in this thesis is to analyse the business process models from a security perspective to derive security objectives and requirements. The thesis has proposed three complementary contributions: Firstly, security risk-oriented patterns that integrate the security risk analysis into business process models. These patterns supports security risk concepts in business process models that business analyst can understand easily. Secondly, the taxonomy for assessing security in business processes. This taxonomy is used to classify the security risk-oriented patterns and helps analysts to apply these patterns in business process models. Finally, these contributions form a foundation for a method, security requirements elicitation from business processes (SREBP) that performs a systematic elicitation of security requirements for their business processes.

These contributions work together to support the security requirements elicitation from business process models, where, i) the identification of business assets and determination of security objectives are carried out from the enterprise's business processes. Moreover, ii) the elicitation of security requirements are performed on the operational business processes using contextual areas.

Location: 
Liivi 2-404
Event category: