An Ontological Approach to Risk and Security Modeling in ArchiMate

Official website: https://unibz-core.github.io/security-archimate/

ArchiMate is an open and independent enterprise architecture modeling language to support the description, analysis, and visualization of architecture within and across business domains. ArchiMate is a technical standard from The Open Group. It is based on concepts from the now-superseded IEEE 1471 standard.

The "Risk and Security Overlay” of the ArchiMate language is an attempt to introduce risk and security modeling in ArchiMate language.

Through an ontological approach, we propose redesigning the security aspects of this overlay to improve ArchiMate's security modeling capabilities.

Project Structure

• /archimate_files contains the files made using Archi.
• /breach_reports contains LastPass' reports, which is the basis for our study.

Built with

• Archi - The Archi® modeling toolkit is targeted toward all levels of Enterprise Architects and Modellers.

Citing this work

To cite this proposal, use:

Oliveira, Í., Sales, T.P., Almeida, J.P.A. et al. Ontology-based security modeling in ArchiMate. Softw Syst Model (2024). https://doi.org/10.1007/s10270-024-01149-1

Authors

• Ítalo Oliveira¹²
• Tiago Prince Sales²
• João Paulo A. Almeida³
• Riccardo Baratella⁴
• Mattia Fumagalli¹
• Giancarlo Guizzardi²

---

Publications

• Oliveira, Í., Sales, T.P., Almeida, J.P.A., Baratella, R., Fumagalli, M., Guizzardi, G. (2024). Ontology-based Security Modeling in ArchiMate. Software and Systems Modeling. https://doi.org/10.1007/s10270-024-01149-1

• Oliveira, Í., Sales, T.P., Almeida, J.P.A., Baratella, R., Fumagalli, M., Guizzardi, G. (2022). Ontological Analysis and Redesign of Security Modeling in ArchiMate. In: Barn, B.S., Sandkuhl, K. (eds) The Practice of Enterprise Modeling. PoEM 2022. Lecture Notes in Business Information Processing, vol 456. Springer, Cham. https://doi.org/10.1007/978-3-031-21488-2_6

Errata

For questions, commentaries, or reporting mistakes, feel free to use Issues.

• Nothing yet.

Footnotes

1. Free University of Bozen-Bolzano (Unibz), Bolzano, Italy. ↩ ↩²

2. Semantics, Cybersecurity & Services (SCS), University of Twente, Enschede, The Netherlands. ↩ ↩² ↩³

3. Federal University of Espírito Santo (UFES), Vitória, Brazil. ↩

4. Dipartimento di Antichità, Filosofia, Storia (DAFIST), University of Genoa, Genoa, Italy. ↩