Ontological analysis and redesign of security modeling in ArchiMate

Ítalo José Da Silva Oliveira; Tiago Prince Sales; João Paulo A. Almeida; Riccardo Baratella; Mattia Fumagalli; Giancarlo Guizzardi

doi:10.1007/978-3-031-21488-2_6

Ontological analysis and redesign of security modeling in ArchiMate

Ítalo José Da Silva Oliveira, Tiago Prince Sales, João Paulo A. Almeida, Riccardo Baratella, Mattia Fumagalli, Giancarlo Guizzardi^*

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

5 Citations (Scopus)

355 Downloads (Pure)

Abstract

Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. ArchiMate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related constructs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security modeling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.

Original language	English
Title of host publication	The Practice of Enterprise Modelling
Subtitle of host publication	15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings
Publisher	Springer
Pages	82-98
Number of pages	17
ISBN (Electronic)	978-3-031-21488-2
ISBN (Print)	978-3-031-21487-5
DOIs	https://doi.org/10.1007/978-3-031-21488-2_6
Publication status	Published - 17 Nov 2022
Event	15th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modelling, PoEM 2022 - Hendon campus, London, United Kingdom Duration: 23 Nov 2022 → 25 Nov 2022 Conference number: 15 https://poem2022.mdx.ac.uk/

Publication series

Name	Lecture Notes in Business Information Processing
Publisher	Springer
Volume	456

Conference

Conference	15th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modelling, PoEM 2022
Abbreviated title	PoEM 2022
Country/Territory	United Kingdom
City	London
Period	23/11/22 → 25/11/22
Internet address	https://poem2022.mdx.ac.uk/

Keywords

Security modelling
Enterprise Architecture
ArchiMate
Ontological analysis
Unified Foundational Ontology
2023 OA procedure

Access to Document

10.1007/978-3-031-21488-2_6Licence: Unspecified

06543F62_3CBF_11ED_98B3_8B8A416328DEAccepted author version, 2.78 MB
978-3-031-21488-2Final published version, 18.2 MBLicence: Taverne

Cite this

Da Silva Oliveira, Í. J., Prince Sales, T., Almeida, J. P. A., Baratella, R., Fumagalli, M., & Guizzardi, G. (2022). Ontological analysis and redesign of security modeling in ArchiMate. In The Practice of Enterprise Modelling: 15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings (pp. 82-98). (Lecture Notes in Business Information Processing; Vol. 456). Springer. https://doi.org/10.1007/978-3-031-21488-2_6

Da Silva Oliveira, Ítalo José ; Prince Sales, Tiago ; Almeida, João Paulo A. et al. / Ontological analysis and redesign of security modeling in ArchiMate. The Practice of Enterprise Modelling: 15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings. Springer, 2022. pp. 82-98 (Lecture Notes in Business Information Processing).

@inproceedings{dadc2f5b828e40b49b1113bb62c493a8,

title = "Ontological analysis and redesign of security modeling in ArchiMate",

abstract = "Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. ArchiMate{\textquoteright}s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related constructs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security modeling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.",

keywords = "Security modelling, Enterprise Architecture, ArchiMate, Ontological analysis, Unified Foundational Ontology, 2023 OA procedure",

author = "{Da Silva Oliveira}, {{\'I}talo Jos{\'e}} and {Prince Sales}, Tiago and Almeida, {Jo{\~a}o Paulo A.} and Riccardo Baratella and Mattia Fumagalli and Giancarlo Guizzardi",

year = "2022",

month = nov,

day = "17",

doi = "10.1007/978-3-031-21488-2_6",

language = "English",

isbn = "978-3-031-21487-5",

series = "Lecture Notes in Business Information Processing",

publisher = "Springer",

pages = "82--98",

booktitle = "The Practice of Enterprise Modelling",

address = "Germany",

note = "15th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modelling, PoEM 2022, PoEM 2022 ; Conference date: 23-11-2022 Through 25-11-2022",

url = "https://poem2022.mdx.ac.uk/",

}

Da Silva Oliveira, ÍJ , Prince Sales, T, Almeida, JPA, Baratella, R, Fumagalli, M & Guizzardi, G 2022, Ontological analysis and redesign of security modeling in ArchiMate. in The Practice of Enterprise Modelling: 15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings. Lecture Notes in Business Information Processing, vol. 456, Springer, pp. 82-98, 15th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modelling, PoEM 2022, London, United Kingdom, 23/11/22. https://doi.org/10.1007/978-3-031-21488-2_6

Ontological analysis and redesign of security modeling in ArchiMate. / Da Silva Oliveira, Ítalo José ; Prince Sales, Tiago; Almeida, João Paulo A. et al.
The Practice of Enterprise Modelling: 15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings. Springer, 2022. p. 82-98 (Lecture Notes in Business Information Processing; Vol. 456).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Ontological analysis and redesign of security modeling in ArchiMate

AU - Da Silva Oliveira, Ítalo José

AU - Prince Sales, Tiago

AU - Almeida, João Paulo A.

AU - Baratella, Riccardo

AU - Fumagalli, Mattia

AU - Guizzardi, Giancarlo

N1 - Conference code: 15

PY - 2022/11/17

Y1 - 2022/11/17

N2 - Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. ArchiMate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related constructs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security modeling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.

AB - Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. ArchiMate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related constructs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security modeling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.

KW - Security modelling

KW - Enterprise Architecture

KW - ArchiMate

KW - Ontological analysis

KW - Unified Foundational Ontology

KW - 2023 OA procedure

U2 - 10.1007/978-3-031-21488-2_6

DO - 10.1007/978-3-031-21488-2_6

M3 - Conference contribution

SN - 978-3-031-21487-5

T3 - Lecture Notes in Business Information Processing

SP - 82

EP - 98

BT - The Practice of Enterprise Modelling

PB - Springer

T2 - 15th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modelling, PoEM 2022

Y2 - 23 November 2022 through 25 November 2022

ER -

Da Silva Oliveira ÍJ , Prince Sales T, Almeida JPA, Baratella R, Fumagalli M, Guizzardi G. Ontological analysis and redesign of security modeling in ArchiMate. In The Practice of Enterprise Modelling: 15th IFIP WG 8.1 Working Conference, PoEM 2022, London, UK, November 23–25, 2022, Proceedings. Springer. 2022. p. 82-98. (Lecture Notes in Business Information Processing). doi: 10.1007/978-3-031-21488-2_6

Ontological analysis and redesign of security modeling in ArchiMate

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this