Business Process Model and Notation for Forensic-Ready Software Systems

Lukas Daubner, Raimundas Matulevičius, Barbora Buhnova, Tomas Pitner

2022

Abstract

The design and development of secure systems is an important and challenging task. However, such systems should also be prepared for eventual disputes or occurrences of a security incident. To solve this, forensic-ready software systems are, by-design, prepared to assist in the forensic investigation and to provide on-point data with high evidentiary value. However, software engineering support for the systematic development of such software systems is rather sparse. This paper tackles the problem by introducing novel modelling notation, called BPMN for Forensic-Ready Software Systems (BPMN4FRSS), including its syntax and semantics. The notation aims to capture the forensic-ready controls and enable reasoning over them, primarily focusing on potential digital evidence. Importantly, it is made to support forensic readiness oriented risk management decisions. The approach is then demonstrated in a scenario where the controls, which mitigate security and business risks, are properly represented.

Paper Citation

in Harvard Style

Daubner L., Matulevičius R., Buhnova B. and Pitner T. (2022). Business Process Model and Notation for Forensic-Ready Software Systems. In Proceedings of the 17th International Conference on Evaluation of Novel Approaches to Software Engineering - Volume 1: ENASE, ISBN 978-989-758-568-5, pages 95-106. DOI: 10.5220/0011041000003176

in Bibtex Style

@conference{enase22,
author={Lukas Daubner and Raimundas Matulevičius and Barbora Buhnova and Tomas Pitner},
title={Business Process Model and Notation for Forensic-Ready Software Systems},
booktitle={Proceedings of the 17th International Conference on Evaluation of Novel Approaches to Software Engineering - Volume 1: ENASE,},
year={2022},
pages={95-106},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011041000003176},
isbn={978-989-758-568-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 17th International Conference on Evaluation of Novel Approaches to Software Engineering - Volume 1: ENASE,
TI - Business Process Model and Notation for Forensic-Ready Software Systems
SN - 978-989-758-568-5
AU - Daubner L.
AU - Matulevičius R.
AU - Buhnova B.
AU - Pitner T.
PY - 2022
SP - 95
EP - 106
DO - 10.5220/0011041000003176