Transforming Socio-Technical Security Requirements in SecBPMN Security Policies.
Mattia Salnitri, Paolo Giorgini · 2014
Abstract. Socio-Technical Systems (STSs) are complex systems composed of both social (i.e., humans and organizations) and technical (i.e., hardware and soft-ware) elements. Security requirements for STSs define constraints for the socio-technical interactions and can be specified as a set of security policies that have to be satisfied by the components of the system during their interactions. In this paper, we present how security requirements molded in STS-ml are transformed in security policies expressed in SecBPMN, an extension of BPMN with security annotations. 1