Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios - Data and Applications Security and Privacy XXIX
Conference Papers Year : 2015

Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios

Abstract

To support the re-use of business process models, an emerging trend in Business Process Management, it is crucial to assist customers during deployment. We study how to do this for an important class of business processes, called security-sensitive workflows, in which execution constraints on the tasks are complemented with authorization constraints (e.g., Separation of Duty) and authorization policies (constraining which users can execute which tasks). We identify the capability of solving Scenario Finding Problems (SFPs), i.e. finding concrete execution scenarios, as crucial in supporting the re-use of security-sensitive workflows. Solutions of SFPs provide evidence that the business process model can be successfully executed under the policy adopted by the customer. We present a technique for solving two SFPs and validate it on real-world business process models taken from an on-line library.
Fichier principal
Vignette du fichier
340025_1_En_6_Chapter.pdf (738.08 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01745831 , version 1 (28-03-2018)

Licence

Identifiers

Cite

Daniel Santos, Silvio Ranise, Luca Compagna, Serena E. Ponta. Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. 29th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2015, Fairfax, VA, United States. pp.85-100, ⟨10.1007/978-3-319-20810-7_6⟩. ⟨hal-01745831⟩
84 View
190 Download

Altmetric

Share

More