1. Ontological analysis and redesign of security modeling in ArchiMate
- Author
-
Ítalo Oliveira, Tiago Prince Sales, João Paulo A. Almeida, Riccardo Baratella, Mattia Fumagalli, Giancarlo Guizzardi, Services, Cybersecurity & Safety, and Digital Society Institute
- Subjects
Unified Foundational Ontology ,2023 OA procedure ,ArchiMate ,Ontological analysis ,Security modelling ,Enterprise Architecture - Abstract
Enterprise Risk Management and security have become a fundamental part of Enterprise Architecture, so several frameworks and modeling languages have been designed to support the activities associated with these areas. ArchiMate’s Risk and Security Overlay is one of such proposals, endorsed by The Open Group. We investigate the capabilities of the proposed security-related constructs in ArchiMate with regard to the necessities of enterprise security modeling. Our analysis relies on a well-founded reference ontology of security to uncover ambiguity, missing modeling elements, and other deficiencies of the security modeling capabilities in ArchiMate. Based on this ontologically-founded analysis, we propose a redesign of security aspects of ArchiMate to overcome its original limitations.
- Published
- 2022