Skip to Main content Skip to Navigation
Conference papers

Adapting workflows using generic schemas: application to the security of business processes

Ronan-Alexandre Cherrueau 1, 2 Mario Südholt 2, 1 Omar Chebaro 2, 1
2 ASCOLA - Aspect and composition languages
LINA - Laboratoire d'Informatique de Nantes Atlantique, Département informatique - EMN, Inria Rennes – Bretagne Atlantique
Abstract : Existing approaches to the adaptation of workflows over web services fall short in two respects. First, they only provide, if ever, limited means for taking into account the execution history of a workflow. Second, they do not support adaptations that require modifications not only at the service composition level but also at the levels of interceptors and service implementations. This is particular problematic for the enforcement of security properties over workflows: enforcing authorization properties, for instance, frequently requires execution contexts to be defined and modifications to be applied at all these abstraction levels of web services. We present two main contributions in this context. First, we introduce workflow adaptation schemas (WAS), a new notion of generic protocol-based workflow adapters. WAS enable the declarative definition of adaptations involving complex service compositions and implementations. Second, we present two real-world security issues related to the use of OAuth 2.0, a recent and widely used framework for the authorization of resource accesses. As we motivate, these security issues require history-based adaptations over different abstraction levels of services. We then show how to resolve these issues using WAS.
Document type :
Conference papers
Complete list of metadata
Contributor : Ronan-Alexandre Cherrueau Connect in order to contact the contributor
Submitted on : Thursday, September 26, 2013 - 4:34:28 PM
Last modification on : Wednesday, December 5, 2018 - 1:22:13 AM


  • HAL Id : hal-00866485, version 1


Ronan-Alexandre Cherrueau, Mario Südholt, Omar Chebaro. Adapting workflows using generic schemas: application to the security of business processes. CloudCom - 5th IEEE International Conference on Cloud Computing Technology and Science - 2013, Dec 2013, Bristol, United Kingdom. pp.519-524. ⟨hal-00866485⟩



Les métriques sont temporairement indisponibles