Towards a Metamodel for SABSA Conceptual Architecture Descriptions

The SABSA framework allows to develop an Enterprise Security Architecture from business requirements down to controls and associated security management. The purpose of this paper is to propose a metamodel that includes key constructs used in SABSA for conceptual security architecture description and relationships between these constructs. We propose five metamodel fragments that correspond to five of the six views of SABSA and illustrate with an example how the metamodel can be used to develop a conceptual architecture.