{"id":"https://openalex.org/W1992592271","doi":"https://doi.org/10.1109/icst.2013.63","title":"Business Process Compliance via Security Validation as a Service","display_name":"Business Process Compliance via Security Validation as a Service","publication_year":2013,"publication_date":"2013-03-01","ids":{"openalex":"https://openalex.org/W1992592271","doi":"https://doi.org/10.1109/icst.2013.63","mag":"1992592271"},"language":"en","primary_location":{"id":"doi:10.1109/icst.2013.63","doi":"https://doi.org/10.1109/icst.2013.63","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icst.2013.63","pdf_url":null,"source":{"id":"https://openalex.org/S7407085955","display_name":"IEEE International Conference on Software Testing, Verification and Validation (ICST)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Sixth International Conference on Software Testing, Verification and Validation","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://zenodo.org/record/3432034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071893704","display_name":"Luca Compagna","orcid":"https://orcid.org/0009-0003-1072-4352","observed_orcids":["https://orcid.org/0009-0003-1072-4352"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luca Compagna","raw_affiliation_strings":["SAP Research Sophia-Antipolis, Mougins, France","SAP Res. Sophia-Antipolis, Mougins, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP Research Sophia-Antipolis, Mougins, France","institution_ids":[]},{"raw_affiliation_string":"SAP Res. Sophia-Antipolis, Mougins, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073942600","display_name":"Pierre Guilleminot","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pierre Guilleminot","raw_affiliation_strings":["SAP Research Sophia-Antipolis, Mougins, France","SAP Res. Sophia-Antipolis, Mougins, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP Research Sophia-Antipolis, Mougins, France","institution_ids":[]},{"raw_affiliation_string":"SAP Res. Sophia-Antipolis, Mougins, France","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016746101","display_name":"Achim D. Brucker","orcid":"https://orcid.org/0000-0002-6355-1200","observed_orcids":["https://orcid.org/0000-0002-6355-1200"]},"institutions":[{"id":"https://openalex.org/I4210132444","display_name":"Systems, Applications & Products in Data Processing (Germany)","ror":"https://ror.org/03dsc8d33","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210132444"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Achim D. Brucker","raw_affiliation_strings":["SAP AG, Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP AG, Karlsruhe, Germany","institution_ids":["https://openalex.org/I4210132444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1466,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.91002432,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"455","last_page":"462"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/business-process-compliance","display_name":"business process compliance","score":0.9750000238418579},{"id":"https://openalex.org/keywords/security-validation","display_name":"security validation","score":0.671999990940094},{"id":"https://openalex.org/keywords/business-process-model-and-notation","display_name":"BPMN","score":0.746999979019165},{"id":"https://openalex.org/keywords/compliance-requirements","display_name":"compliance requirements","score":0.6159999966621399},{"id":"https://openalex.org/keywords/business-process-modeling","display_name":"business process modeling","score":0.5350000262260437},{"id":"https://openalex.org/keywords/security-requirements","display_name":"security requirements","score":0.3440000116825104}],"concepts":[{"id":"https://openalex.org/C179299601","wikidata":"https://www.wikidata.org/wiki/Q1017605","display_name":"Business Process Model and Notation","level":5,"score":0.8350367546081543},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7130473256111145},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.6886457204818726},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.5969178676605225},{"id":"https://openalex.org/C11066294","wikidata":"https://www.wikidata.org/wiki/Q1518244","display_name":"Business rule","level":4,"score":0.5890225768089294},{"id":"https://openalex.org/C162754035","wikidata":"https://www.wikidata.org/wiki/Q17006331","display_name":"Artifact-centric business process model","level":5,"score":0.5809500217437744},{"id":"https://openalex.org/C123247970","wikidata":"https://www.wikidata.org/wiki/Q5001932","display_name":"Business requirements","level":4,"score":0.5487138628959656},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.46927037835121155},{"id":"https://openalex.org/C80309976","wikidata":"https://www.wikidata.org/wiki/Q7007379","display_name":"Business process management","level":4,"score":0.42990776896476746},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3840389549732208},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.34227454662323},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.13249823451042175},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10541358590126038},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/icst.2013.63","doi":"https://doi.org/10.1109/icst.2013.63","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icst.2013.63","pdf_url":null,"source":{"id":"https://openalex.org/S7407085955","display_name":"IEEE International Conference on Software Testing, Verification and Validation (ICST)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE Sixth International Conference on Software Testing, Verification and Validation","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.302.8481","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.302.8481","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.brucker.ch/bibliography/download/2013/compagna.ea-bp-compliance-2013.pdf","raw_type":"text"},{"id":"pmh:oai:zenodo.org:3432034","doi":null,"is_oa":true,"landing_page_url":"https://zenodo.org/record/3432034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:3432034","doi":null,"is_oa":true,"landing_page_url":"https://zenodo.org/record/3432034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5899999737739563}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320338370","display_name":"FP7 Information and Communication Technologies","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W51155874","https://openalex.org/W1432697400","https://openalex.org/W1493944547","https://openalex.org/W1518234761","https://openalex.org/W2022738481","https://openalex.org/W2070299493","https://openalex.org/W2083186005","https://openalex.org/W2090139686","https://openalex.org/W2137292425","https://openalex.org/W2163229252","https://openalex.org/W2169696634","https://openalex.org/W2622110426","https://openalex.org/W4236524236"],"related_works":["https://openalex.org/W2070299493","https://openalex.org/W2108677628","https://openalex.org/W3012523","https://openalex.org/W1816866928","https://openalex.org/W2809220081","https://openalex.org/W2747972566","https://openalex.org/W2134187816","https://openalex.org/W2026402587","https://openalex.org/W4403155729","https://openalex.org/W36341315"],"abstract_inverted_index":{"Modern":[0],"enterprise":[1],"systems":[2],"are":[3,17,79,84,160],"often":[4],"process-based,":[5],"i.e.,":[6],"they":[7],"allow":[8],"for":[9,40],"the":[10,42,45,56,62,67,82,91,95,108,119,122,146,152],"direct":[11],"execution":[12],"of":[13,44,97],"business":[14,46,54,57,68,92,111,127,179],"processes":[15,47],"that":[16,126],"specified":[18],"in":[19,86,106,118,144],"a":[20,31,37,53,75,87,100,133,141],"high-level":[21],"language":[22],"such":[23],"as":[24,36,60],"BPMN.":[25],"In":[26],"this":[27],"paper,":[28],"we":[29,139],"present":[30],"service,":[32],"called":[33],"Security":[34],"Validation":[35],"Service":[38],"(SVaaS)":[39],"validating":[41],"compliance":[43,65],"during":[48],"design-time.":[49],"Basically,":[50],"while":[51,121],"modeling":[52],"process":[55,69],"analyst":[58],"specifies":[59],"well":[61],"security":[63,109],"and":[64,81,102,156,171],"requirements":[66,78],"should":[70],"comply":[71],"to.":[72],"By":[73],"pressing":[74],"button,":[76],"these":[77],"validated":[80],"results":[83],"presented":[85],"graphical":[88],"format":[89],"to":[90,162,173],"analysis.":[93],"At":[94],"core":[96],"SVaaS":[98,135,142,147,158,175],"lies":[99],"rigorous":[101],"industrially":[103],"viable":[104],"approach":[105],"which":[107,145],"validation":[110],"logic":[112],"is":[113,130,149],"handled":[114,131],"server-side":[115],"(SVaaS":[116],"Server)":[117],"Cloud,":[120],"client-side":[123],"user":[124],"interface":[125],"analysts":[128],"use":[129],"by":[132],"light-weight":[134],"Connector.":[136],"As":[137],"proof-of-concept":[138],"created":[140],"prototype":[143],"Server":[148],"deployed":[150],"on":[151],"SAP":[153,168],"NetWeaver":[154,169],"Cloud":[155],"two":[157,164],"Connectors":[159],"built":[161],"enable":[163],"well-known":[165],"BPMN":[166],"tools,":[167],"BPM":[170],"Activiti,":[172],"consume":[174],"against":[176],"industrial":[177],"relevant":[178],"processes.":[180]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":1}],"updated_date":"2026-10-29T09:56:32.521200","created_date":"2016-06-24T00:00:00"}