QUIVIR Research Group
Edit Page
Page Revisions
Contact Us



Upcoming Events

Projects and Research




Master Thesis



Faculty Members

Rafael M. Gasca, PhD

María Teresa Gómez, PhD

Pablo Neira Ayuso, PhD

Sergio Pozo Hidalgo, PhD

Rafael Ceballos, PhD

Fernando de la Rosa, PhD

Miguel Toro, PhD

Diana Borrego, PhD

Ángel Jesús Varela Vaca, PhD

Luisa Parody, PhD

José Miguel Pérez Álvarez


TDiaCO-BPMS (2010)

OPbus (2009)

Edit Menu


OPBUS (OPtimization BUsiness process Security) is a framework composed of different tools for automated risk management in business processes. OPBUS is ready to use solvers for the automated analyses in business processes.

  • OPBUS-RAT a tool for the automatic risk assessment in business processes.
  • OPBUS-SPA a tool for the automatic selection of treatments of risk-aware business process.
  • OPBUS-MON a tool for the monitorization of risk-aware business process (coming soon).


OPBUS intends to integrate risk management into the Business Process Management (BPM) based on a Model-Driven Architecture (MDA) approach. The integration of BPM and risk management is aligned to the strategic objectives of ”Integration of RM/RA with Operation Processes”; and "1.4 Secure, dependable and trusted infrastructures” defined by the European Network and Information Security Agency (ENISA) and European Commission 7th Framwork Programme (7FP) in the ICT Trust and Security.

OPBUS lifecycle


  • Business processes quality improvement.
  • Automatic generation of security-aware business processes solutions.


OPBUS-RAT tool strives the automatic risk assessment of business process models in order to determine which activities are non-conformance with regard to established risk levels.



  • GMF-based plugin graphical editor with BPMN support.
  • Model validation in-line. Changes in validations are reflected on-the-fly in the editor.
  • Graphical annotation for risk evaluation.
  • Properties views to configure transformation and risk metrics.
  • Automatic transformation of models to constraint models. Changes in transformation templates are reflected on-the-fly in the editor.
  • Automatic evaluation of the models using constraint solvers. Easy integration with different CSP solvers in the market such as Comet, Choco or JaCOP.

Video demo
(low quality version)




Coming really soon!!


Coming soon!!


[1]  A.J, Varela-Vaca, Rafael M. Gasca, "Towards the Automatic and Optimal Selection of Risk Treatments for Business Processes using a Constraint Programming Approach", Information and Software Technology, Volume 55, Issue 11, Pages 1948–1973, ISSN 0950-5849, http://dx.doi.org/10.1016/j.infsof.2013.05.007. (JCR 2012: 1.522)

[2]  A.J. Varela-Vaca, Robert Warschofsky, Rafael M. Gasca, Sergio Pozo, C. Meinel " A Security Pattern-Driven Approach Toward the Automation of Risk Treatment in Business Processeses". 5th International Conference on Computational Intelligence in Security for Information Systems (CISIS 2012). Ostrava, Czech Republic, 2012, Advances in Intelligent Systems and Computing, 2012, Volume 189, 13-23DOI: 10.1007/978-3-642-33018-6_2.

[3] A.J. Varela-Vaca, Rafael M. Gasca and Sergio Pozo. "OPBUS: Risk-aware framework for the conformance of security-quality requirements in business processes". International Conference on Security and Cryptography (SECRYPT 2011) . Seville, Spain. ISBN 978-989-8425-71-3. 2011.

[4] A.J. Varela-Vaca, Rafael M. Gasca, A. Jiminez-Ramirez. "A Model-Driven Engineering approach with Diagnosis of Non-Conformance of Security Objectives in Business Process Models". 5th IEEE International Conference on Research Challenges in Information Science (RCIS 2011). Guadalopue, France, ISBN 978-1-4244-8671-7. 2011

[5] A. J. Varela- Vaca, Rafael M. Gasca, L. Parody: "OPBUS: Automating Structural Fault Diagnosis for Graphical Models in the Design of Business Processes". 21th International Workshop in Principles of Diagnosis (DX'10). Portland, Oregon, USA. ISBN: 978-1-936263-02-8. 2010.

Downloadable content for reviwers


For more information please do not hesitate to contact in ajvarela@us.es.
Edit Page - Page Revisions - RecentChanges

Send comments and suggestions to: gasca@lsi.us.es
Page last modified on September 06, 2013, at 09:16 AM