业务过程元素安全目标分析方法

Analysis on security objectives of business process elements

为了确定业务过程的安全需要,提出一种业务过程元素(BPEs)的安全目标分析方法.该方法依据业务过程模型,通过对BPEs安全目标赋予初始值,根据活动的出度和入度确认活动安全目标加权系数;同时还提出了BPEs安全目标一致性检验规则和修正原则,据此检验和修正BPEs安全目标初值,最终确定BPEs的安全目标值.案例研究表明,以BPEs所支持的业务过程为根本,该方法能够客观地确定BPEs安全目标,为更具针对性地保护信息系统提供指南.

A method of analyzing security objectives of business process elements（BPEs） was presented to determine the security requirements of business processes.According to the business process model,the initial security objectives of BPEs were identified based on a general classification.And the weighting coefficients of the security objectives of activities were affirmed by calculating the in-degree and out-degree of activities.The consistency checking rules and revising principles were brought forward to check and modify the security objectives,the final security objectives of BPEs were obtained.A case study showed that the proposed method could be used to get the security objectives of BPEs objectively.