A novel comprehensive extension to BPMN language for security-aware two-tier security model and architecture of cloud applications

Enterprises have always given great importance to business process management to be competitive and profitable. With the advent of cloud computing, other opportunities are given to these enterprises to execute their business processes with minimal cost in a very short time. Business processes (BPs) are modelled using specific languages. BPMN is the most popular of these languages. However, its current version does not support process modelling for eventual execution in the cloud. Resource management, risk management, deployment, and security are key concepts in cloud computing that a modelling language must support. This paper presents an extension of the BPMN language for modelling business processes in the cloud, integrating the concept of security to secure cloud execution. The use of our new proposed architecture and models for secure BPs is illustrated by a real-life example that demonstrates how our extension is used to define/enforce actual security requirements.