Modelling Security Aspects with ArchiMate: A Systematic Mapping Study

Abstract

Enterprise Architecture (EA) allows organizations to align their business goals and processes to information technology. This alignment is delineated using modelling languages, one of which is ArchiMate. However, current modelling languages experience a lack of elements to model security - one of the most decisive aspects for organizations nowadays. The objective of this paper is to identify the state of the art surrounding incorporation of security aspects into EA modelling languages, with particular interest in the micromobility context, which inherits critical security concerns from the Internet-of-Things and Cyberphysical systems domains. A systematic mapping study was carried out identifying lack of research concerning the intersection of EA modelling languages, security and micromobility. Only 14 primary papers were found; the vast majority highlight limitations in the existing security modelling, with ArchiMate being the most commonly used, but also the most criticized. The results reinforce a lack of research related to EA, security and micromobility. We can conclude that the current modelling alternatives still present shortcomings related to the standardization, complexity and completeness. An extension of ArchiMate to represent security aspects needs to be investigated, adding new elements to achieve the required representation that allow security requirements to be considered.