Search

PurposeSecurity requirements play an important role in software development. These can be specified both in enterprise architecture models and in business processes. Enterprises increasingly carry out larger amounts of business processes where security plays a major role. Business processes including security can be automatically obtained from enterprise architecture models by applying a model-driven architecture approach, through a CIM to CIM transformation. The aim of this article is to present the specification of transformation rules for the correspondence between enterprise architecture and business process model elements focusing on security.Design/methodology/approachThis work utilizes motivational aspects of the ArchiMate language to model security in the business layer of enterprise architectures. Next, a set of transformation rules defined with the Atlas Transformation Language are utilized to obtain the correspondence of the enterprise architecture elements in a business process, modelled with a security extension of BPMN.FindingsA total of 19 transformation rules have been defined. These rules are more complex than element to element relations, as they take into consideration the context of the elements for establishing the correspondence. Additionally, the prototype of a tool that allows the automatic transformation between both models has been developed.Originality/valueThe results of this work demonstrate the possibility to tackle complex transformations between both models, as previous literature focuses on semantic correspondences. Moreover, the obtained models can be of use for software developers applying the model-driven approach.

Nowadays, municipalities can provide services to citizens through information technologies, improving their massification and access. These are generally provided based on a country’s laws, but digitalization dissimilarities and the lack of guidelines complicate an equilibrium in their provision between the different municipalities of a country. On the other hand, enterprise architectures can be used for standardization, convergence, and interoperability in electronic governments, as they allow a holistic perspective for viewing the information technology resources of a municipality and aligning them with their business strategy. The current proposal emerges in this scenario, with the objective of presenting a method for developing reference enterprise architectures based on e-services and its use in a specific case. Concretely, a reference enterprise architecture has been developed for a set of minimum e-services that must be provided by Chilean municipalities.

Problems associated with data quality cost companies millions of dollars every year because of bad decision-making based on inaccurate information, noncompliance with regulations, or failure to timely deal with customer problems. Nowadays, data have become one of the most valuable assets of organizations; data quality is no longer a task involving only information technology managers, business managers are increasingly more implicated. In the context of business management processes, the early specification of data quality requirements can be crucial. This article reveals the results of a research study conducted in specialized sites, blogs, forums, and literature related to how business people (not specialized in information technology) express data quality needs. Additionally, how the result was validated is shown through the participation of business experts and analysts. The outcome were lists with 18 types of problems associated with data quality and 35 characteristics that data must comply with in relation to quality.

Context There are many techniques for performing authentication, such as text passwords and biometrics. Combining two factors into one technique is known as multi-factor authentication. The lack of a proper method for comparing and selecting these techniques for their implementation in software development processes is observed. Objective The article presents a recommendation Framework proposal for comparing and selecting authentication techniques in a software development process. Method Knowledge from academy is obtained through a systematic literature review and experience from industry is gathered using a survey and interviews. The results of these two techniques are used to generate a Framework proposal, which is validated afterwards, through an expert panel and the case study method. Results A recommendation Framework is generated, which recommends the most appropriate authentication schemes and methods for software applications based on criteria identified in literature and industry, categorized by usability, security and costs, plus the context for which the application is intended. The Framework's validity is ascertained by confirming that its recommendations are on line with those on industry, based in the results from the developed case studies. A tool prototype was created in order to help using the Framework in software development processes. Conclusion The proposed Framework helps to cover the observed gap in literature, helping software developers to compare and select the most appropriate authentication techniques for their applications.

Agriculture production highly depends on water and soil factors which increasingly need to be utilized efficiently. Precision agriculture, through the set of information technologies that it uses, allows to effectively manage these resources. This work aims to gather the existing knowledge on technologies used in precision agriculture and ways to discern the most appropriate one for different contexts in agricultural processes. A systematic literature review is performed to identify precision agriculture implementations and to answer questions such as the type of technologies used, criteria for their comparison and selection, and the existence of frameworks that help to decide what technologies to implement. A total of 3,949 publications were reviewed, of which 259 addressed the posed research questions. The findings are that remote sensors are the most used technology, the required knowledge is an important criterion for deciding to implement precision agriculture, and no framework was found that guides its implementation.