Enterprise Architecture-Based Risk and Security Modelling and Analysis

Henk Jonkers; Dick Quartel

doi:10.1007/978-3-319-46263-9_6

Enterprise Architecture-Based Risk and Security Modelling and Analysis

Henk Jonkers, Dick Quartel

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

8 Citations (Scopus)

28 Downloads (Pure)

Abstract

The growing complexity of organizations and the increasing number of sophisticated cyber attacks asks for a systematic and integral approach to Enterprise Risk and Security Management (ERSM). As enterprise architecture offers the necessary integral perspective, including the business and IT aspects as well as the business motivation, it seems natural to integrate risk and security aspects in the enterprise architecture. In this paper we show how the ArchiMate standard for enterprise architecture modelling can be used to support risk and security modelling and analysis throughout the ERSM cycle, covering both risk assessment and security deployment.

Original language	English
Title of host publication	Graphical Models for Security
Subtitle of host publication	Third International Workshop, GraMSec 2016, Lisbon, Portugal, June 27, 2016, Revised Selected Papers
Editors	Barbara Kordy, Mathias Ekstedt, Deng Seong Kim
Place of Publication	Cham
Publisher	Springer
Pages	94-101
Number of pages	8
ISBN (Electronic)	978-3-319-46263-9
ISBN (Print)	978-3-319-46262-2
DOIs	https://doi.org/10.1007/978-3-319-46263-9_6
Publication status	Published - 8 Sept 2016
Event	3rd International Workshop on Graphical Models for Security, GraMSec 2016 - Lisbon, Portugal Duration: 27 Jun 2016 → 27 Jun 2016 Conference number: 3

Publication series

Name	Lecture notes in computer science
Publisher	Springer Verlag
Volume	9987
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Workshop

Workshop	3rd International Workshop on Graphical Models for Security, GraMSec 2016
Abbreviated title	GraMSec
Country/Territory	Portugal
City	Lisbon
Period	27/06/16 → 27/06/16

Keywords

Enterprise Architecture
Risk analysis
Risk and security modelling
EC Grant Agreement nr.: FP7/318003
ArchiMate
EWI-27179
METIS-318505
IR-101091
EC Grant Agreement nr.: FP7/2007-2013

Access to Document

10.1007/978-3-319-46263-9_6

Cite this

Jonkers, H., & Quartel, D. (2016). Enterprise Architecture-Based Risk and Security Modelling and Analysis. In B. Kordy, M. Ekstedt, & D. Seong Kim (Eds.), Graphical Models for Security: Third International Workshop, GraMSec 2016, Lisbon, Portugal, June 27, 2016, Revised Selected Papers (pp. 94-101). (Lecture notes in computer science; Vol. 9987). Springer. https://doi.org/10.1007/978-3-319-46263-9_6

@inproceedings{37b8df8a79be47ff8048c1bb53eebd6b,

title = "Enterprise Architecture-Based Risk and Security Modelling and Analysis",

abstract = "The growing complexity of organizations and the increasing number of sophisticated cyber attacks asks for a systematic and integral approach to Enterprise Risk and Security Management (ERSM). As enterprise architecture offers the necessary integral perspective, including the business and IT aspects as well as the business motivation, it seems natural to integrate risk and security aspects in the enterprise architecture. In this paper we show how the ArchiMate standard for enterprise architecture modelling can be used to support risk and security modelling and analysis throughout the ERSM cycle, covering both risk assessment and security deployment.",

keywords = "Enterprise Architecture, Risk analysis, Risk and security modelling, EC Grant Agreement nr.: FP7/318003, ArchiMate, EWI-27179, METIS-318505, IR-101091, EC Grant Agreement nr.: FP7/2007-2013",

author = "Henk Jonkers and Dick Quartel",

note = "eemcs-eprint-27179 ; 3rd International Workshop on Graphical Models for Security, GraMSec 2016, GraMSec ; Conference date: 27-06-2016 Through 27-06-2016",

year = "2016",

month = sep,

day = "8",

doi = "10.1007/978-3-319-46263-9_6",

language = "English",

isbn = "978-3-319-46262-2",

series = "Lecture notes in computer science",

publisher = "Springer",

pages = "94--101",

editor = "Barbara Kordy and Mathias Ekstedt and {Seong Kim}, Deng",

booktitle = "Graphical Models for Security",

address = "Germany",

}

Jonkers, H & Quartel, D 2016, Enterprise Architecture-Based Risk and Security Modelling and Analysis. in B Kordy, M Ekstedt & D Seong Kim (eds), Graphical Models for Security: Third International Workshop, GraMSec 2016, Lisbon, Portugal, June 27, 2016, Revised Selected Papers. Lecture notes in computer science, vol. 9987, Springer, Cham, pp. 94-101, 3rd International Workshop on Graphical Models for Security, GraMSec 2016, Lisbon, Portugal, 27/06/16. https://doi.org/10.1007/978-3-319-46263-9_6

Enterprise Architecture-Based Risk and Security Modelling and Analysis. / Jonkers, Henk; Quartel, Dick.
Graphical Models for Security: Third International Workshop, GraMSec 2016, Lisbon, Portugal, June 27, 2016, Revised Selected Papers. ed. / Barbara Kordy; Mathias Ekstedt; Deng Seong Kim. Cham: Springer, 2016. p. 94-101 (Lecture notes in computer science; Vol. 9987).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Enterprise Architecture-Based Risk and Security Modelling and Analysis

AU - Jonkers, Henk

AU - Quartel, Dick

N1 - Conference code: 3

PY - 2016/9/8

Y1 - 2016/9/8

N2 - The growing complexity of organizations and the increasing number of sophisticated cyber attacks asks for a systematic and integral approach to Enterprise Risk and Security Management (ERSM). As enterprise architecture offers the necessary integral perspective, including the business and IT aspects as well as the business motivation, it seems natural to integrate risk and security aspects in the enterprise architecture. In this paper we show how the ArchiMate standard for enterprise architecture modelling can be used to support risk and security modelling and analysis throughout the ERSM cycle, covering both risk assessment and security deployment.

AB - The growing complexity of organizations and the increasing number of sophisticated cyber attacks asks for a systematic and integral approach to Enterprise Risk and Security Management (ERSM). As enterprise architecture offers the necessary integral perspective, including the business and IT aspects as well as the business motivation, it seems natural to integrate risk and security aspects in the enterprise architecture. In this paper we show how the ArchiMate standard for enterprise architecture modelling can be used to support risk and security modelling and analysis throughout the ERSM cycle, covering both risk assessment and security deployment.

KW - Enterprise Architecture

KW - Risk analysis

KW - Risk and security modelling

KW - EC Grant Agreement nr.: FP7/318003

KW - ArchiMate

KW - EWI-27179

KW - METIS-318505

KW - IR-101091

KW - EC Grant Agreement nr.: FP7/2007-2013

U2 - 10.1007/978-3-319-46263-9_6

DO - 10.1007/978-3-319-46263-9_6

M3 - Conference contribution

SN - 978-3-319-46262-2

T3 - Lecture notes in computer science

SP - 94

EP - 101

BT - Graphical Models for Security

A2 - Kordy, Barbara

A2 - Ekstedt, Mathias

A2 - Seong Kim, Deng

PB - Springer

CY - Cham

T2 - 3rd International Workshop on Graphical Models for Security, GraMSec 2016

Y2 - 27 June 2016 through 27 June 2016

ER -

Jonkers H, Quartel D. Enterprise Architecture-Based Risk and Security Modelling and Analysis. In Kordy B, Ekstedt M, Seong Kim D, editors, Graphical Models for Security: Third International Workshop, GraMSec 2016, Lisbon, Portugal, June 27, 2016, Revised Selected Papers. Cham: Springer. 2016. p. 94-101. (Lecture notes in computer science). doi: 10.1007/978-3-319-46263-9_6

Enterprise Architecture-Based Risk and Security Modelling and Analysis

Abstract

Publication series

Workshop

Keywords

Access to Document

Fingerprint

Cite this