- Phone: +43 (1) 505 36 88
- Fax: +43 (1) 505 88 88
Bio
Simon Tjoa is a project member of Secure Business Austria. His research focuses mainly on concepts of Risk Management, IT-Security, Secure Business Processes and Software Design, on which he specialized during his studies on the Vienna University and Vienna University of Technology. After graduating with a Master’s degree in Business Informatics, Simon is currently working on his PhD within the domain of Business Informatics. In the year 2003 he founded the company CASIXX which focuses on Software Development.
Publications
-
Simon Tjoa and Stefan Jakoubi and Sigrun Goluch and Gerhard Kitzler, "Planning Dynamic Activity and Resource Allocations Using a Risk-Aware Business Process Management Approach," in 2010 International Conference on Availability, Reliability and Security, 2010, pp. 268-274. BibTeX | PDF
@INPROCEEDINGS{Tjoa_Planning_Dynamic_Activity_and__2010,
Author = {Simon Tjoa and Stefan Jakoubi and Sigrun Goluch and Gerhard Kitzler},
title = {Planning Dynamic Activity and Resource Allocations Using a Risk-Aware Business Process Management Approach},
booktitle = {2010 International Conference on Availability, Reliability and Security},
year = {2010},
month = {2},
pdf = {Tjoa_ARES2010_dynamic.pdf},
pages = {268-274},
} -
Stefan Jakoubi and Simon Tjoa and Sigrun Goluch and Gerhard Kitzler, "Risk-Aware Business Process Management: Establishing the Link Between Business and Security," in Complex Intelligent Systems and Their Applications, 2010, pp. 109-135. BibTeX | PDF
@INPROCEEDINGS{Jakoubi_CISTA_2010,
Author = {Stefan Jakoubi and Simon Tjoa and Sigrun Goluch and Gerhard Kitzler},
title = {Risk-Aware Business Process Management: Establishing the Link Between Business and Security},
booktitle = {Complex Intelligent Systems and Their Applications},
year = {2010},
month = {1},
pdf = {Jakoubi_CISTA_2010.pdf},
volume = {41},
pages = {109-135},
publisher = {Springer New York},
} -
Simon Tjoa and Stefan Jakoubi and Gernot Goluch and Gerhard Kitzler and Sigrun Goluch and Gerald Quirchmayr, "A Formal Approach Enabling Risk-aware Business Process Modeling and Simulation," IEEE Transactions on Services Computing, 2010. BibTeX | PDF
@ARTICLE{Tjoa2010a,
Author = {Simon Tjoa and Stefan Jakoubi and Gernot Goluch and Gerhard Kitzler and Sigrun Goluch and Gerald Quirchmayr},
title = {A Formal Approach Enabling Risk-aware Business Process Modeling and Simulation},
journal = {IEEE Transactions on Services Computing},
year = {2010},
month = {4},
pdf = {Tjoa_TSC2010.pdf},
} -
Markus Huber and Simon Tjoa and Stewart Kowalski and Marcus Nohlberg, "Towards Automating Social Engineering Using Social Networking Sites," in Computational Science and Engineering, IEEE International Conference on, 2009, pp. 117-124. BibTeX | PDF
@INPROCEEDINGS{Huber_TowardsAutomatingSocial_2009,
Author = {Markus Huber and Simon Tjoa and Stewart Kowalski and Marcus Nohlberg},
title = {Towards Automating Social Engineering Using Social Networking Sites},
booktitle = {Computational Science and Engineering, IEEE International Conference on},
year = {2009},
month = {1},
pdf = {2009 - Huber - Towards Automating Social Engineering Using Social Networking Sites.pdf},
volume = {3},
pages = {117-124},
publisher = {IEEE Computer Society},
} -
Simon Tjoa and Thomas Neubauer and Stefan Jakoubi, "A Roadmap to Risk-Aware Business Process Management," in APSCC, 2009. BibTeX
@INPROCEEDINGS{Jakoubi_RoadmaptoRiskAware_2009,
Author = {Simon Tjoa and Thomas Neubauer and Stefan Jakoubi},
title = {A Roadmap to Risk-Aware Business Process Management},
booktitle = {APSCC},
year = {2009},
month = {1},
} -
Simon Tjoa and Stefan Jakoubi, "A Reference Model for Risk-Aware Business Process Management," in International Conference on Risks and Security of Internet and Systems, 2009. BibTeX | PDF
@INPROCEEDINGS{Jakoubi_ReferenceModelRiskAware_2009,
Author = {Simon Tjoa and Stefan Jakoubi},
title = {A Reference Model for Risk-Aware Business Process Management},
booktitle = {International Conference on Risks and Security of Internet and Systems},
year = {2009},
month = {1},
pdf = {Jakoubi_ReferenceModelRiskAware_2009 (2).pdf},
publisher = {IEEE},
} -
Gerald Quirchmayr and Gernot Goluch and Simon Tjoa and Stefan Jakoubi, "A Survey of Scientific Approaches Considering the Integration of Security and Risk Aspects into Business Process Management," in International Workshop on Database and Expert Systems Applications, 2009, pp. 127-132. BibTeX | PDF
@INPROCEEDINGS{Jakoubi_SurveyofScientific_2009,
Author = {Gerald Quirchmayr and Gernot Goluch and Simon Tjoa and Stefan Jakoubi},
title = {A Survey of Scientific Approaches Considering the Integration of Security and Risk Aspects into Business Process Management},
booktitle = {International Workshop on Database and Expert Systems Applications},
year = {2009},
month = {1},
pdf = {Jakoubi_SurveyofScientific_2009.pdf},
pages = {127-132},
publisher = {IEEE Computer Society},
} -
Gernot Goluch and Simon Tjoa and Thomas Neubauer and Stefan Jakoubi and Martin Wisser, "A Process Model for RFID based Business Process Analysis," in APSCC, 2009. BibTeX
@INPROCEEDINGS{Neubauer_ProcessModelRFID_2009,
Author = {Gernot Goluch and Simon Tjoa and Thomas Neubauer and Stefan Jakoubi and Martin Wisser},
title = {A Process Model for RFID based Business Process Analysis},
booktitle = {APSCC},
year = {2009},
month = {1},
} -
Gerald Quirchmayr and Gernot Goluch and Simon Tjoa and Stefan Jakoubi, "Deriving Resource Requirements Applying Risk-Aware Business Process Modeling and Simulation," in Proceedings of the 16th European Conference on Information Systems (ECIS), 2008. BibTeX
@INPROCEEDINGS{Jakoubi_DerivingResourceRequirements_2008,
Author = {Gerald Quirchmayr and Gernot Goluch and Simon Tjoa and Stefan Jakoubi},
sbahotlist = {true},
title = {Deriving Resource Requirements Applying Risk-Aware Business Process Modeling and Simulation},
booktitle = {Proceedings of the 16th European Conference on Information Systems (ECIS)},
year = {2008},
month = {1},
abstract = {Today, companies face the challenge to effectively and efficiently perform their business processes as well as to guarantee their continuous operation. To meet the economic requirements, companies often consult business process management experts. The robustness and continuity of operations is separately considered in other domains such as business continuity management and risk management. The shortcoming of this separation is that in most cases a common reasoning and information basis is missing. With the risk-aware process modeling and simulation methodology named ROPE we fill this gap and combine the strengths of the aforementioned domains. In this paper, we present new ROPE simulation capabilities focusing on the determination of resource requirements considering the impact of occurring threats on business processes. Furthermore, we introduce an example scenario to clarify how a company can benefit from applying these extensions.},
} -
Stefan Fenz and Andreas Ekelhart and Gernot Goluch and Simon Tjoa and Stefan Jakoubi and Thomas Mueck, "Integration of an Ontological Information Security Concept in Risk Aware Business Process Management," in Proceedings of the 41st Hawaii International Conference on System Sciences, HICSS2008, 2008, pp. 377-385. BibTeX | PDF
@INPROCEEDINGS{Goluch_IntegrationofOntological_2008,
Author = {Stefan Fenz and Andreas Ekelhart and Gernot Goluch and Simon Tjoa and Stefan Jakoubi and Thomas Mueck},
sbahotlist = {true},
title = {Integration of an Ontological Information Security Concept in Risk Aware Business Process Management},
booktitle = {Proceedings of the 41st Hawaii International Conference on System Sciences, HICSS2008},
year = {2008},
month = {1},
pdf = {2008 - Goluch - Integration of an Ontological Information Security Concept in Risk-Aware Business Process Management.pdf},
pages = {377-385},
publisher = {IEEE Computer Society},
note = {978-0-7695-3075-8},
} -
Gerald Quirchmayr and Simon Tjoa and Stefan Jakoubi, "ROPE: A Methodology for Enabling the Risk-Aware Modeling and Simulation of Business Processes," in Proceedings of the 15th European Conference on Information Systems (ECIS 2007), 2007. BibTeX
@INPROCEEDINGS{Jakoubi_ROPEMethodologyEnabling_2007,
Author = {Gerald Quirchmayr and Simon Tjoa and Stefan Jakoubi},
sbahotlist = {true},
title = {ROPE: A Methodology for Enabling the Risk-Aware Modeling and Simulation of Business Processes},
booktitle = {Proceedings of the 15th European Conference on Information Systems (ECIS 2007)},
year = {2007},
month = {1},
abstract = {Risk management is essential regarding the maintenance of a companys business processes. The ability of companies to prevent risks as well as to respond quickly and appropriately to emerging threats is increasingly becoming a crucial success factor. In order to cope with these challenges, companies constitute business process and risk management approaches. Traditional business process management focuses on the economical optimization of processes. Apart from that, risk management designs robust business processes to strengthen the resilience of daily business. Both domains try to improve business, but both approach this goal from a different view on the understanding of improvement. Due to the fact that optimizing recommendations of business process management and risk management may be contradictory, we propose one unified method that unites both points of views to enable risk-aware business process management and optimization. In this paper, we introduce the ROPE (Risk-Oriented Process Evaluation) methodology which combines capabilities of business process management, risk management and business continuity management to support the holistic evaluation of business processes not only regarding their economic efficiency but also their robustness and security. The basis for this combination are the refinement of business process activities into four atomic elements (Conditions, Actions, Resources and Environments) and a process-oriented way of modeling threats as well as security, counter and recovery measures. In this paper we demonstrate how to enable risk-aware business process management and simulation through the application of the ROPE methodology.},
}