Architecture-Based Change Impact Analysis in Information Systems and Business Processes

Rostami, Kiana; Heinrich, Robert; Busch, Axel; Reussner, Ralf

doi:10.1109/icsa.2017.17

Cited by 15 publications

(5 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An affected architectural element indicates that an attacker could compromise this element. The metrics for evaluating are precision and recall [61] since they are used in different similar approaches to describe accuracy [22], [23], [34]. We calculate them by comparing the results of each scenario with a manually created reference output as described in the following section.…”

Section: A Evaluation Goals Questions and Metricsmentioning

confidence: 99%

“…Here, the properties are the different metrics. For accuracy, we chose precision and recall, which is also used to evaluate the accuracy of the KAMP approach [22], [23], which we used as a structure for our propagation algorithm. Using the same metric lowers this risk.…”

Section: E Threats To Validitymentioning

confidence: 99%

“…This also applies to M 2.2. Also, in the original KAMP evaluation[22] M 2.2 is used for answering a similar question. Reliability describes whether other researchers can reproduce the results later.…”

mentioning

confidence: 99%

See 2 more Smart Citations

Architectural Attack Propagation Analysis for Identifying Confidentiality Issues

Walter

Heinrich

Reussner

2022

2022 IEEE 19th International Conference on Software Architecture (ICSA)

Self Cite

View full text Add to dashboard Cite

Exchanging data between different systems enables us to build new smart services and digitise various areas of our daily life. This digitalisation leads to more efficient usage of resources, and an increased monetary value. However, the connection of different systems also increases the number of potential vulnerabilities. The vulnerabilities on their own might be harmless, but attackers could build attack paths based on the combination of different vulnerabilities. Additionally, attackers might exploit existing access control policies to further propagate through the system. For analysing this dependency between vulnerabilities and access control policies, we extended an architecture description language (ADL) to model access control policies and specify vulnerabilities. We developed an attack propagation analysis operating on the extended ADL, which can help to determine confidentiality violations in a system. We evaluated our approach by analysing the accuracy and the effort compared to a manual analysis using different scenarios in three case studies. The results indicate that our analysis is capable of identifying attack paths and reducing the effort compared to manual detection.

show abstract

Section: A Evaluation Goals Questions and Metricsmentioning

confidence: 99%

Section: E Threats To Validitymentioning

confidence: 99%

See 1 more Smart Citation

Architectural Attack Propagation Analysis for Identifying Confidentiality Issues

Walter

Heinrich

Reussner

2022

2022 IEEE 19th International Conference on Software Architecture (ICSA)

Self Cite

View full text Add to dashboard Cite

show abstract

“…However, the technique is more suitable for systematic analysis and construction in a coarse granularity. Its design pattern can inspire us to build a fine-grained model for business processes (Rostami et al, 2017).…”

Section: Related Workmentioning

confidence: 99%

Software business process adaptive approach supporting organization architecture evolution

Yin

et al. 2022

Expert Systems

View full text Add to dashboard Cite

Software maintenance and evolution play an important role in the software engineering field, especially when current software becomes more and more complex and powerful. As an entity to implement business processes and gain revenue, valuable software is composed of business logic and corresponding organization role interaction interfaces. With the enterprise development, the organization architecture also evolves, like expanding, cross department cooperation, and so on. However, existing software process adaptive approaches mainly focus on handling the change of the business (program) logic instead of organization structure. Therefore, we propose an adaptive software business process approach that supports organization architecture evolution and automatically migrates the run‐time process instances to the latest version. First, a business process adaptation model is designed, which includes the organization layer, business process layer and event layer that connects the two. Based on the model, the organization changing impact and business process model modification are formalized. Besides, the business process adaptation approach is designed. According to the dependence between the organization architecture and the business process activities, the affected domain detection algorithms for three basic business process structures and the business process instance migration algorithm are developed. Finally, the feasibility and stability of the proposed system are comprehensively evaluated with the synthetic data sets.

show abstract

“…In this regard, special tools also have been developed to monitor the alignment and coevolution of business process and enterprise software systems to estimate the change propagation caused by a change request in business processes or software systems based on the software architecture and the process design [109,110].…”

Section: Process Andmentioning

confidence: 99%

A Meta-Model for Information Systems Quality

Russo

Ciancarini

Falasconi³

et al. 2018

ACM Trans. Manage. Inf. Syst.

View full text Add to dashboard Cite

Information Systems Quality (ISQ) is a critical source of competitive advantages for organizations. In a scenario of increasing competition on digital services, ISQ is a competitive differentiation asset. In this regard, managing, maintaining, and evolving IT infrastructures have become a primary concern of organizations. Thus, a technical perspective on ISQ provides useful guidance to meet current challenges. The financial sector is paradigmatic, since it is a traditional business, with highly complex business-critical legacy systems, facing a tremendous change due to market and regulation drivers. We carried out a Mixed-Methods study, performing a Delphi-like study on the financial sector. We developed a specific research framework to pursue this vertical study. Data were collected in four phases starting with a high-level randomly stratified panel of 13 senior managers and then a target panel of 124 carefully selected and well-informed domain experts. We have identified and dealt with several quality factors; they were discussed in a comprehensive model inspired by the ISO 25010, 42010, and 12207 standards, corresponding to software quality, software architecture, and software process, respectively. Our results suggest that the relationship among quality, architecture, and process is a valuable technical perspective to explain the quality of an information system. Thus, we introduce and illustrate a novel meta-model, named SQuAP (Software Quality, Architecture, Process), which is intended to give a comprehensive picture of ISQ by abstracting and connecting detailed individual ISO models.

show abstract

Architecture-Based Change Impact Analysis in Information Systems and Business Processes

Cited by 15 publications

References 29 publications

Architectural Attack Propagation Analysis for Identifying Confidentiality Issues

Architectural Attack Propagation Analysis for Identifying Confidentiality Issues

Software business process adaptive approach supporting organization architecture evolution

A Meta-Model for Information Systems Quality

Contact Info

Product

Resources

About