Full metadata record
DC FieldValueLanguage
dc.contributor.authorMock, Ralf Günter-
dc.contributor.authorTruninger, Benjamin-
dc.contributor.authorBrunner, Patrick-
dc.contributor.authorHruz, Tomas-
dc.date.accessioned2018-11-27T15:07:21Z-
dc.date.available2018-11-27T15:07:21Z-
dc.date.issued2015-
dc.identifier.isbn978-1-138-02681-0de_CH
dc.identifier.isbn978-1-315-73697-6de_CH
dc.identifier.urihttps://digitalcollection.zhaw.ch/handle/11475/13265-
dc.description.abstractUnified Modeling Language diagrams (UML) are considered as an underestimated knowledge source for risk assessment (RA) approaches. For this, a combination of Class and Sequence Diagrams is used to get relevant information for further risk analysis. In an IT enterprise, existing business processes source code can be used to automatically generate a full process Class Diagram. The paper suggests a way to significantly reduce the size of the Class Diagram. To do this, the most relevant business case of the audited enterprise is selected and used to generate a Sequence Diagram. Tools simplify this approach. The resulting Sequence Diagram only consists of classes and operations relevant to the chosen business case. They can then be matched to the initial full system Class Diagram. Elements in the Class Diagram that do not have a match in the Sequence Diagram can be removed, resulting in a reduced Class Diagram. The reduced Class Diagram is the base for RA heuristics, e.g., many incoming associations of a class suggest that other classes often depend on this class. Therefore, a failure of this class ponts to an increased impact value.de_CH
dc.language.isoende_CH
dc.publisherTaylor & Francisde_CH
dc.rightsLicence according to publishing contractde_CH
dc.subjectIT securityde_CH
dc.subjectZuverlässigkeitde_CH
dc.subjectUnified Modeling Languagede_CH
dc.subjectRisk assessmentde_CH
dc.subject.ddc005: Computerprogrammierung, Programme und Datende_CH
dc.titleEnhancement of IT risk assessments by UMLde_CH
dc.typeKonferenz: Paperde_CH
dcterms.typeTextde_CH
zhaw.departementSchool of Engineeringde_CH
zhaw.organisationalunitInstitut für Informatik (InIT)de_CH
zhaw.publisher.placeLondonde_CH
zhaw.conference.detailsEuropean Safety and Reliability Conference (ESREL 2014), Wroclaw, Poland, 14-18 September 2014de_CH
zhaw.funding.euNode_CH
zhaw.originated.zhawYesde_CH
zhaw.pages.end1537de_CH
zhaw.pages.start1531de_CH
zhaw.publication.statuspublishedVersionde_CH
zhaw.publication.reviewPeer review (Publikation)de_CH
zhaw.title.proceedingsSafety and reliability : methodology and applicationsde_CH
Appears in collections:Publikationen School of Engineering

Files in This Item:
There are no files associated with this item.
Show simple item record
Mock, R. G., Truninger, B., Brunner, P., & Hruz, T. (2015). Enhancement of IT risk assessments by UML [Conference paper]. Safety and Reliability : Methodology and Applications, 1531–1537.
Mock, R.G. et al. (2015) ‘Enhancement of IT risk assessments by UML’, in Safety and reliability : methodology and applications. London: Taylor & Francis, pp. 1531–1537.
R. G. Mock, B. Truninger, P. Brunner, and T. Hruz, “Enhancement of IT risk assessments by UML,” in Safety and reliability : methodology and applications, 2015, pp. 1531–1537.
MOCK, Ralf Günter, Benjamin TRUNINGER, Patrick BRUNNER und Tomas HRUZ, 2015. Enhancement of IT risk assessments by UML. In: Safety and reliability : methodology and applications. Conference paper. London: Taylor & Francis. 2015. S. 1531–1537. ISBN 978-1-138-02681-0
Mock, Ralf Günter, Benjamin Truninger, Patrick Brunner, and Tomas Hruz. 2015. “Enhancement of IT Risk Assessments by UML.” Conference paper. In Safety and Reliability : Methodology and Applications, 1531–37. London: Taylor & Francis.
Mock, Ralf Günter, et al. “Enhancement of IT Risk Assessments by UML.” Safety and Reliability : Methodology and Applications, Taylor & Francis, 2015, pp. 1531–37.


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.