    @inproceedings {josevivas2003,
	title = {Towards Business Process-Driven Framework for Security Engineering with the UML},
	booktitle = {6th International Conference on Information Security (ISC{\textquoteright}03)},
	series = {LNCS},
	volume = {2851},
	year = {2003},
	month = {October},
	pages = {381-395},
	publisher = {Springer-Verlag},
	organization = {Springer-Verlag},
	address = {Bristol, U.K.},
	abstract = {<p>A challenging task in security engineering concerns the specification and integration of security with other requirements at the top level of requirements engineering. Empirical studies show that it is commonly at the business process level that customers and end users are able to express their security needs. In addition, systems are often developed by automating existing manual business processes. Since many security notions belongs conceptually to the world of business processes, it is natural to try to capture and express them in the context of business models in which moreover customers and end users feel most comfortable. In this paper, based on experience drawn from an ongoing work within the CASENET project \cite{CASENET}, we propose a UML-based business process-driven framework for the development of security-critical systems.</p>},
	isbn = {1-4020-7449-2},
	author = {Jose L. Vivas and Jose A. Montenegro and Javier Lopez}
}
