SecureBPMN is a domain-specific modeling language that allows to model security aspects (e.g., access control, separation of duty, confidentiality). SecurePBPMN is defined as a meta-model that can easily be integrated into BPMN and, thus, can be used for modeling secure and business processes as well as secure service compositions.
![ScreenShot of the SecureBPMN Modeling and Verification Environment] (https://www.brucker.ch/projects/securebpmn/img/activiti-bpmn-analysis.png) The SecureBPMN tool chain does not only support modeling of secure business process and service compositions: it also supports the formal analysis both on the level of SecureBPMN models as well as refinement properties between the model and the actual implementation.
- Eclipse Helios
- SATMC (http://www.ai-lab.it/satmc/), version 3.3.x (for the formal analysis of secure business processes)
First, install the GenericBreakGlass-XACML into your local maven repository:
cd GenericBreakGlass-XACML/src/eu.aniketos.securebpmn.xacml.parent
mvn clean eclipse:clean
mvn eclipse:eclipse
mvn install
cd ..
To initialize the Eclipse project structure, please do
cd designer/src//org.activiti.designer.parent
mvn clean eclipse:clean
mvn eclipse:eclipse
cd ..
After this, all projects can be imported into a fresh Eclipse
workspace using File -> Import -> Existing Projects into Workspace
.
- Open the folder
model
in the projectorg.activiti.designer.model
- Open
BPMN20.genmodel
- Select the top level node (
bpmn2
) - Select
Generator -> Reload...
from the top-level menu, selectEcore model
and complete the wizard. While doing this, ensure that all packages are select in thePackage Selection
screen. - Select the top level node (
bpmn2
) - Select
Generator -> Generate all
from the top-level menu
Select the project org.activiti.designer.eclipse
and select Run as -> Eclipse application
in the context menu (right click).
Java 6 must be installed and executable:
export JAVA_HOME=<install directory of java 6>
export PATH=$JAVA_HOME/bin:$PATH
Moreover, the xalan libraries must be installed:
cd runtime/src/userguide
ant install.xalan.libs
If you did not install GenericBreakGlass-XACML into your local maven repository as part of the installation of the SecureBPMN Designer:
cd GenericBreakGlass-XACML/src/eu.aniketos.securebpmn.xacml.parent
mvn clean eclipse:clean
mvn eclipse:eclipse
mvn install
cd ..
Compile the SecureBPMN runtime:
cd runtime/src/distro
ant clean distro
If ``ant clean distro``` is not able to download tomcat, please download
apache-tomcat-6.0.32.zip` and copy it into
`runtime/src/distro/target`.
cd runtime/src/distro/target/activiti-5.8/setup/
ant demo.start
And open http://localhost:8080/activiti-explorer
in a web browser.
Note that and demo.stop
will stop the demo and ant demo.clean
will
reset the demo setup.
Main developer: Achim D. Brucker
- Jan Alexander
- Matthias Klink
- Helmut Petritsch
- Raj Ruparel
This project is under the Apache 2.0 License.
SPDX-License-Identifier: Apache-2.0
The master git repository for this project is hosted by the Software Assurance & Security Research Team at https://git.logicalhacking.com/SecureBPMN/SecureBPMN.
Related publications are listed on the SecureBPMN website. The core publications are:
- Achim D. Brucker. Integrating Security Aspects into Business Process
Models.
In it - Information Technology, 55 (6), pages 239-246, 2013. doi:10.1524/itit.2013.2004 http://www.brucker.ch/bibliography/abstract/brucker-securebpmn-2013 - Achim D. Brucker, Luca Compagna, and Pierre Guilleminot. Compliance Validation of Secure Service Compositions. In Secure and Trustworthy Service Composition: The Aniketos Approach. Lecture Notes in Computer Science: State of the Art Surveys (8900), pages 136-149, Springer-Verlag, 2014. doi:10.1145/2295136.2295160 http://www.brucker.ch/bibliography/abstract/brucker.ea-aniketos-compliance-2014
- Achim D. Brucker, Isabelle Hang, Gero Lückemeyer, and Raj Ruparel. SecureBPMN: Modeling and Enforcing Access Control Requirements in Business Processes. In ACM symposium on access control models and technologies (SACMAT), pages 123-126, ACM Press, 2012. doi:10.1145/2295136.2295160 http://www.brucker.ch/bibliography/abstract/brucker.ea-securebpmn-2012