A UML Extension for the Model-driven Specification of Audit Rules

Bernhard Hoisl; Mark Strembeck

doi:10.1007/978-3-642-31069-0_2

A UML Extension for the Model-driven Specification of Audit Rules

Bernhard Hoisl
, Mark Strembeck

Complex Networks

Publikation: Beitrag in Buch/Konferenzband › Beitrag in Konferenzband

36 Downloads (Pure)

Abstract

In recent years, a number of laws and regulations (such as the Basel II accord or SOX) demand that organizations record certain activities or decisions to fulfill legally enforced reporting duties. Most of these regulations have a direct impact on the information systems that support an organization's business processes. Therefore, the definition of audit requirements at the modeling-level is an important prerequisite for the thorough implementation and enforcement of corresponding policies in a software system. In this paper, we present a UML extension for the specification of audit properties. The extension is generic and can be applied to a wide variety of UML elements. In a model-driven development (MDD) approach, our extension can be used to generate corresponding audit rules via model transformations.

Originalsprache	Englisch
Titel des Sammelwerks	Proceedings of the 2nd International Workshop on Information Systems Security Engineering (WISSE)
Herausgeber*innen	M. Bajec and J. Eder
Erscheinungsort	Berlin
Verlag	Springer
Seiten	16 - 30
DOIs	https://doi.org/10.1007/978-3-642-31069-0_2
Publikationsstatus	Veröffentlicht - 1 Juni 2012

Österreichische Systematik der Wissenschaftszweige (ÖFOS)

502050 Wirtschaftsinformatik
102016 IT-Sicherheit
102
102022 Softwareentwicklung

Zugriff auf Dokument

10.1007/978-3-642-31069-0_2Lizenz: Nicht angegeben

Paper2Akzeptiertes Autor*inn*enmanuskript, 219 KBLizenz: Sonstige

Domain-Specific Languages for Model-Driven Security Engineering
Hoisl, B. (Projektleitung)
1/12/11 → 30/11/13
Projekt: Anderes

Zitat

@inproceedings{ebe003df9b574bcc8e0a1ba7eec09101,

title = "A UML Extension for the Model-driven Specification of Audit Rules",

abstract = "In recent years, a number of laws and regulations (such as the Basel II accord or SOX) demand that organizations record certain activities or decisions to fulfill legally enforced reporting duties. Most of these regulations have a direct impact on the information systems that support an organization's business processes. Therefore, the definition of audit requirements at the modeling-level is an important prerequisite for the thorough implementation and enforcement of corresponding policies in a software system. In this paper, we present a UML extension for the specification of audit properties. The extension is generic and can be applied to a wide variety of UML elements. In a model-driven development (MDD) approach, our extension can be used to generate corresponding audit rules via model transformations.",

author = "Bernhard Hoisl and Mark Strembeck",

year = "2012",

month = jun,

day = "1",

doi = "10.1007/978-3-642-31069-0\_2",

language = "English",

pages = "16 -- 30",

editor = "\{M. Bajec and J. Eder\}",

booktitle = "Proceedings of the 2nd International Workshop on Information Systems Security Engineering (WISSE)",

publisher = "Springer",

address = "Germany",

}

TY - GEN

T1 - A UML Extension for the Model-driven Specification of Audit Rules

AU - Hoisl, Bernhard

AU - Strembeck, Mark

PY - 2012/6/1

Y1 - 2012/6/1

N2 - In recent years, a number of laws and regulations (such as the Basel II accord or SOX) demand that organizations record certain activities or decisions to fulfill legally enforced reporting duties. Most of these regulations have a direct impact on the information systems that support an organization's business processes. Therefore, the definition of audit requirements at the modeling-level is an important prerequisite for the thorough implementation and enforcement of corresponding policies in a software system. In this paper, we present a UML extension for the specification of audit properties. The extension is generic and can be applied to a wide variety of UML elements. In a model-driven development (MDD) approach, our extension can be used to generate corresponding audit rules via model transformations.

AB - In recent years, a number of laws and regulations (such as the Basel II accord or SOX) demand that organizations record certain activities or decisions to fulfill legally enforced reporting duties. Most of these regulations have a direct impact on the information systems that support an organization's business processes. Therefore, the definition of audit requirements at the modeling-level is an important prerequisite for the thorough implementation and enforcement of corresponding policies in a software system. In this paper, we present a UML extension for the specification of audit properties. The extension is generic and can be applied to a wide variety of UML elements. In a model-driven development (MDD) approach, our extension can be used to generate corresponding audit rules via model transformations.

U2 - 10.1007/978-3-642-31069-0_2

DO - 10.1007/978-3-642-31069-0_2

M3 - Contribution to conference proceedings

SP - 16

EP - 30

BT - Proceedings of the 2nd International Workshop on Information Systems Security Engineering (WISSE)

A2 - M. Bajec and J. Eder, null

PB - Springer

CY - Berlin

ER -

A UML Extension for the Model-driven Specification of Audit Rules

Abstract

Österreichische Systematik der Wissenschaftszweige (ÖFOS)

Zugriff auf Dokument

Projekte

Domain-Specific Languages for Model-Driven Security Engineering

Zitat