Analysis of information security aspects based on the formal models of business processes

Abstract: We outline an approach to analysis of information security aspects basing on formal models of company’s business processes that are described in terms of standard business-modeling notations. Process is considered as a protected object. We partially analyzed some widespread risk evaluation methods in context of the objects used in EPC-model.

Keywords: information security, risks, models of business processes, access rights

For citation:
Pestunova T. M., Rodionova Z. V., Gorinova S. M. Analysis of information security aspects based on the formal models of business processes. Doklady Tomskogo gosudarstvennogo universiteta sistem upravleniya i radioelektroniki, 2014, no. 2(32), pp. 150–156.