An Ontology-Driven Approach for Process-Aware Risk Propagation

Gal Engelberg; Mattia Fumagalli; Adrian Kuboszek; Dan Klein; Pnina Soffer; Giancarlo Guizzardi

doi:10.1145/3555776.3577795

An Ontology-Driven Approach for Process-Aware Risk Propagation

Gal Engelberg, Mattia Fumagalli, Adrian Kuboszek, Dan Klein, Pnina Soffer, Giancarlo Guizzardi

Semantics, Cybersecurity & Services

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

8 Citations (Scopus)

41 Downloads (Pure)

Abstract

Risk Propagation (RP) is a central technique that allows the calculation of the cascading effect of risk within a system. At the current state, there is a lack of risk propagation solutions that can be used to assess the impact of risk at different levels of abstraction, accounting for actors, processes, physical-digital objects, and their relations. To fill this gap, in this paper, we propose a process-aware risk propagation approach that builds on two main components: i. an ontology, which supports functionalities typical of Semantic Web technologies (SWT), and ii. an ad hoc method to calculate the propagation of risk within the given system. We implemented our approach in a proof-of-concept tool, which was validated in the cybersecurity domain.

Original language	English
Title of host publication	Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC 2023
Publisher	Association for Computing Machinery
Pages	1742-1745
Number of pages	4
ISBN (Electronic)	978-1-4503-9517-5
DOIs	https://doi.org/10.1145/3555776.3577795
Publication status	Published - 7 Jun 2023
Event	38th Annual ACM Symposium on Applied Computing, SAC 2023 - Tallinn, Estonia Duration: 27 Mar 2023 → 31 Mar 2023 Conference number: 38

Conference

Conference	38th Annual ACM Symposium on Applied Computing, SAC 2023
Abbreviated title	SAC 2023
Country/Territory	Estonia
City	Tallinn
Period	27/03/23 → 31/03/23

Keywords

2024 OA procedure
risk analytics
risk propagation
ontology-driven risk propagation

Access to Document

10.1145/3555776.3577795

3555776.3577795Final published version, 1.33 MBLicence: Taverne

Cite this

@inproceedings{2b4a945735b14a2b82f402d64bee4481,

title = "An Ontology-Driven Approach for Process-Aware Risk Propagation",

abstract = "Risk Propagation (RP) is a central technique that allows the calculation of the cascading effect of risk within a system. At the current state, there is a lack of risk propagation solutions that can be used to assess the impact of risk at different levels of abstraction, accounting for actors, processes, physical-digital objects, and their relations. To fill this gap, in this paper, we propose a process-aware risk propagation approach that builds on two main components: i. an ontology, which supports functionalities typical of Semantic Web technologies (SWT), and ii. an ad hoc method to calculate the propagation of risk within the given system. We implemented our approach in a proof-of-concept tool, which was validated in the cybersecurity domain.",

keywords = "2024 OA procedure, risk analytics, risk propagation, ontology-driven risk propagation",

author = "Gal Engelberg and Mattia Fumagalli and Adrian Kuboszek and Dan Klein and Pnina Soffer and Giancarlo Guizzardi",

note = "Publisher Copyright: {\textcopyright} 2023 Owner/Author(s).; 38th Annual ACM Symposium on Applied Computing, SAC 2023, SAC 2023 ; Conference date: 27-03-2023 Through 31-03-2023",

year = "2023",

month = jun,

day = "7",

doi = "10.1145/3555776.3577795",

language = "English",

pages = "1742--1745",

booktitle = "Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC 2023",

publisher = "Association for Computing Machinery",

address = "United States",

}

Engelberg, G, Fumagalli, M, Kuboszek, A, Klein, D, Soffer, P & Guizzardi, G 2023, An Ontology-Driven Approach for Process-Aware Risk Propagation. in Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC 2023. Association for Computing Machinery, pp. 1742-1745, 38th Annual ACM Symposium on Applied Computing, SAC 2023, Tallinn, Estonia, 27/03/23. https://doi.org/10.1145/3555776.3577795

An Ontology-Driven Approach for Process-Aware Risk Propagation. / Engelberg, Gal; Fumagalli, Mattia; Kuboszek, Adrian et al.
Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC 2023. Association for Computing Machinery, 2023. p. 1742-1745.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - An Ontology-Driven Approach for Process-Aware Risk Propagation

AU - Engelberg, Gal

AU - Fumagalli, Mattia

AU - Kuboszek, Adrian

AU - Klein, Dan

AU - Soffer, Pnina

AU - Guizzardi, Giancarlo

N1 - Conference code: 38

PY - 2023/6/7

Y1 - 2023/6/7

N2 - Risk Propagation (RP) is a central technique that allows the calculation of the cascading effect of risk within a system. At the current state, there is a lack of risk propagation solutions that can be used to assess the impact of risk at different levels of abstraction, accounting for actors, processes, physical-digital objects, and their relations. To fill this gap, in this paper, we propose a process-aware risk propagation approach that builds on two main components: i. an ontology, which supports functionalities typical of Semantic Web technologies (SWT), and ii. an ad hoc method to calculate the propagation of risk within the given system. We implemented our approach in a proof-of-concept tool, which was validated in the cybersecurity domain.

AB - Risk Propagation (RP) is a central technique that allows the calculation of the cascading effect of risk within a system. At the current state, there is a lack of risk propagation solutions that can be used to assess the impact of risk at different levels of abstraction, accounting for actors, processes, physical-digital objects, and their relations. To fill this gap, in this paper, we propose a process-aware risk propagation approach that builds on two main components: i. an ontology, which supports functionalities typical of Semantic Web technologies (SWT), and ii. an ad hoc method to calculate the propagation of risk within the given system. We implemented our approach in a proof-of-concept tool, which was validated in the cybersecurity domain.

KW - 2024 OA procedure

KW - risk analytics

KW - risk propagation

KW - ontology-driven risk propagation

UR - http://www.scopus.com/inward/record.url?scp=85162900157&partnerID=8YFLogxK

U2 - 10.1145/3555776.3577795

DO - 10.1145/3555776.3577795

M3 - Conference contribution

AN - SCOPUS:85162900157

SP - 1742

EP - 1745

BT - Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing, SAC 2023

PB - Association for Computing Machinery

T2 - 38th Annual ACM Symposium on Applied Computing, SAC 2023

Y2 - 27 March 2023 through 31 March 2023

ER -

An Ontology-Driven Approach for Process-Aware Risk Propagation

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this