Abstract Context Security in Process-Aware Information Systems (PAIS) has gained
increased attention in current research and practice. However, a common understanding …

Access control models provide important means for the systematic specification and
management of the permissions in a business information system. While there are may well …

In this paper, we present an integrated model-driven approach for the specification and the
enforcement of secure object flows in process-driven service-oriented architectures (SOA) …

In the paper, an integrated approach for the modeling and enforcement of delegation
policies in process-aware information systems is presented. In particular, a delegation …

Context In many organizational environments critical tasks exist which–in exceptional cases
such as an emergency–must be performed by a subject although he/she is usually not …

In recent years, business process models are used to define security properties for the
corresponding business information systems. In this context, a number of approaches …

In recent years, a number of laws and regulations (such as the Basel II accord or SOX)
demand that organizations record certain activities or decisions to fulfill legally enforced …

The Unified Modeling Language (UML) has become a popular implementation vehicle for
domain-specific modeling languages (DSMLs). A UML-based DSML is typically defined by …

In model-driven development (MDD), domain-specific modeling languages (DSMLs) act as
a communication vehicle for aligning the requirements of domain experts with the needs of …

In recent years, the specification of domain-specific modeling languages (DSMLs) based on
the MOF and/or UML has become a popular option in the model-driven development …