Abstract:

Business Process Management Systems (BPMS) has emerged in the IT arena as cornerstone in the automation and orchestration of complex services for organizations. These systems manage cost and consequences of security threats could produce information loss for the reputation of organizations. Therefore, the early response regarding to the non-compliance of security requirement is a real necessity overall during the business process execution. Currently, an active response requires a human intervention with high know-how and expertise in both business process management and security. In this paper, we propose an initial work which presents an integrated approach for the automatic continuous monitoring and checking compliance of security requirements at runtime of business processes.