-------- Original Message -------- Subject: [AISWorld] Security in Business Processes (Preliminary CfP) Date: Thu, 23 Feb 2012 10:56:00 +0100 From: Rafael Accorsi rafael.accorsi@iig.uni-freiburg.de Organization: University of Freiburg To: aisworld@lists.aisnet.org

SBP'12: Joint Workshop on Security in Business Processes http://www.inf.unibz.it/sbp12/

in conjunction with the

10th Int'l Conference on Business Process Management http://bpm2012.ut.ee/

Despite the growing demand for compliant business processes, security and privacy incidents caused by erroneous process specifications are still omnipresent. In fact, often business process management and security issues stand out as separate silos, and are seldom addressed together towards the development of trustworthy, compliant business processes.

By combining the successful experiences of the First International Workshop on Alignment of the Business Process and Security Modelling (ABPSM'11) and Workshop on Workflow Security Audit and Certification (WfSAC'11), the Joint Workshop on Security in Business Processes (SBP'12) brings together researchers and practitioners interested in security management of business process in process-aware information systems.

SBP'12 encourages innovative methods for workflow security audit and control along the entire business process life-cycle: from design time verification to online operational support and post-mortem analysis. Furthermore, it welcomes contributions beyond the strictly technical character, for instance those considering economic, legal and standardization issues.

*Topics of interest* Alignment Information flow control Authorization Log formats Accountability Meta-models for analysis Audit reduction Operational decision support Business provenance Privacy-aware process discovery Case studies Requirements elicitation Conformance checking Requirements formalization Compliance checking Risk analysis and measurement Continuous audit Runtime verification/monitoring Cost-benefit analysis Security testing Data-aware process mining Trace clustering Formal reasoning Usage control Fraud detection Workflow forensics Economics of audit Workflow simulation Experience reports

*Submission instructions* Submitted manuscripts must be written in English and be no longer than 12 pages. They must be formatted using the LNBIP format http://www.springer.com/?SGWID=1-102-0-0-0. Submissions will be reviewed by at least three PC members based on their originality, significance, technical soundness and clarity of exposition. The workshop papers will be published by Springer as a post-workshop proceedings volume in the series Lecture Notes in Business Information Processing (LNBIP). The submission website is at https://www.easychair.org/account/signin.cgi?conf=sbp12.

*Important dates* Paper submission: June 1, 2012 Paper notification: July 2, 2012 Camera-ready version: July 30, 2012 Workshop: September 3, 2012

*Organizers* PC Chairs Rafael Accorsi (Freiburg U, DE) Raimundas Matulevicius (Tartu U, EE)

Organization Chairs Peter Karpati (Norwegian U of Science and Technology, NO) Marco Montali (Bolzano FU, IT)

Steering Chairs Wil van der Aalst (Eindhoven TU, NL) Guttorm Sindre (Norwegian U of Science and Technology, NO)

*Program committee* to be announced