Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios

Abstract : To support the re-use of business process models, an emerging trend in Business Process Management, it is crucial to assist customers during deployment. We study how to do this for an important class of business processes, called security-sensitive workflows, in which execution constraints on the tasks are complemented with authorization constraints (e.g., Separation of Duty) and authorization policies (constraining which users can execute which tasks). We identify the capability of solving Scenario Finding Problems (SFPs), i.e. finding concrete execution scenarios, as crucial in supporting the re-use of security-sensitive workflows. Solutions of SFPs provide evidence that the business process model can be successfully executed under the policy adopted by the customer. We present a technique for solving two SFPs and validate it on real-world business process models taken from an on-line library.
Document type :
Conference papers
Complete list of metadatas

Cited literature [21 references]  Display  Hide  Download

https://hal.inria.fr/hal-01745831
Contributor : Hal Ifip <>
Submitted on : Wednesday, March 28, 2018 - 3:58:14 PM
Last modification on : Wednesday, March 28, 2018 - 3:59:25 PM
Long-term archiving on : Thursday, September 13, 2018 - 12:03:09 PM

File

340025_1_En_6_Chapter.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Daniel Santos, Silvio Ranise, Luca Compagna, Serena Ponta. Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. 29th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2015, Fairfax, VA, United States. pp.85-100, ⟨10.1007/978-3-319-20810-7_6⟩. ⟨hal-01745831⟩

Share

Metrics

Record views

43

Files downloads

74