Chinese wall security for decentralized workflow management systems

Journal of Computer Security

Volumn 12, Issue 6, 2004, Pages 799-840

  Atluri, Vijayalakshmi ^a   Chun, Soon Ae ^b   Mazzoleni, Pietro ^c  

^a RUTGERS UNIVERSITY   (United States)

^b SETON HALL UNIVERSITY   (United States)

^c UNIVERSITY OF MILAN   (Italy)

Author keywords

Chinese wall security; Distributed Systems; Workflow management systems

Indexed keywords

AUTOMATION; DISTRIBUTED COMPUTER SYSTEMS; MATHEMATICAL MODELS; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

CHINESE WALL SECURITY; DISTRIBUTED SYSTEMS; INFRASTRUCTURE; WORKFLOW MANAGEMENT SYSTEMS;

INFORMATION MANAGEMENT;

EID: 20844432808     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2004-12601     Document Type: Article

References (27)

1. N.R. Adam, V. Atluri and W.-K. Huang, Modeling and analysis of workflows using Petri nets, Journal of Intelligent Information Systems, Special Issue on Workflow and Process Management 10(2) (1998).
2. G. Alonso, D. Agrawal, A. El Abbadi, C. Mohan, R. Gunthor and M. Kamath, EXotica/FMQM: a persistent message-based architecture for distributed workflow management, in: Proceedings of the IFIP WG8.1 Working Conference on Information Systems for Decentralized Organizations, Trond-heim, 1995.
3. V. Atluri and W.-K. Huang, An authorization model for workflows, in: Proceedings of the Fifth European Symposium on Research in Computer Security, in Lecture Notes in Computer Science, No. 1146, Springer, 1996.
4. E. Bertino, E. Ferrari and V. Atluri, A flexible model supporting the specification and enforcement of role-based authorizations in workflow management systems, in: Proc. of the 2nd ACM Workshop on Role-based Access Control, 1997.
5. D.F.C. Brewer and M.J. Nash, The Chinese wall security policy, in: Proceedings of IEEE Symposium on Security and Privacy, 1989, pp. 206-214.
6. 2, Technical Report UGA-CS-TR-97-001, University of Georgia, February 1997.
7. R. Dean, Formal aspects of mobile code security, PhD thesis, Computer Science Department, Princeton University, 1999.
8. W.M. Farmer, J.D. Guttman and V. Swarup, Security for Mobile Agents: Issues and Requirements, in: Proceedings of the 19th National Information Systems Security Conference, 1995, pp. 591-597.
9. D. Georgakopoulos, M. Hornick and A. Sheth, An overview of workflow management: from process modeling to workflow automation infrastructure, in: Distributed and Parallel Databases, 1995, pp. 119-153.
10. D.M. Goldschlag, M.G. Reed and P.F. Syverson, Onion Routing for Anonymous and Private Internet Connections, Communications of the ACM 42(2) (1999).
11. M.H. Kang, J.S. Park and J.N. Froscher, Access control mechanisms for inter-organizational workflow, in: Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies, ACM Press, 2001, pp. 66-74.
12. J.A. Miller, M. Fan, S. Wu, I.B. Arpinar, A.P. Sheth and K.J. Kochut, Security for the meteor workflow management system. Technical Report UGA-CS-LSDIS-TR-99-010, University of Georgia, June 1999.
13. P. Muth, D. Wodtke and J. Weissenfels, From centralized workflow specification to distributed workflow execution, Journal of Intelligent Information Systems 10(2) (1998).
14. A.C. Myers, JFlow: Practical mostly-static information flow control, in: Proceedings of the 26th ACM Symposium on Principles of Programming Languages (POPL), San Anonio, TX, 1999.
15. A.C. Myers, Mostly-static decentralized information flow control, PhD thesis, Laboratory for Computer and Information Science, MIT, 1999.
16. J.S. Park, M.H. Kang and J.N. Froscher, A secure workflow system for dynamic collaboration, in: Proceedings of the 16th International Conference on Information Security: Trusted Information, 2001, pp. 167-181.
17. M.G. Reed, P.F. Syverson and D.M. Goldschlag, Anonymous Connections and Onion Routing, IEEE Journal on Selected Areas in Communication, Special Issue on Copyright and Privacy Protection, 1998.
18. M. Rusinkiewicz and A. Sheth, Specification and execution of transactional workflows, in: Modern Database Systems: The Object Model, Interoperability and Beyond, W. Kim, ed., Addison-Wesley, 1994.
19. M. Rusinkiewicz, A. Sheth and G. Karabatis, Specifying interdatabase dependencies in a multidatabase environment, IEEE Computer 24(12) (1991), 46-53.
20. R.S. Sandhu, A lattice interpretation of the Chinese Wall Policy, in: Proc. of the 15th NIST-NCSC Computer Security Conf., Washington, DC, 1992, pp. 329-339.
21. A. Tripathi, T. Ahmed, V. Kakani and S. Jaman, Implementing distributed workflow systems from XML specifications, Technical report, Department of Computer Science, University of Minnesota, May 2000. Available at http://www.cs.umn.edu/Ajanta.
22. A. Tripathi, T. Ahmed and R. Kumar, Specification of secure distributed collaboration systems, in: Proceedings to International Symposium on Autonomous Distributed Systems, 2002.
23. A. Tripathi, T. Ahmed, R. Kumar and S. Jaman, A coordination model for secure distributed collaboration, in: Proceedings of Workshop on Internet Process Coordination and Ubiquitous Computing, CRC Press, 2001.
24. K. Venter and M.S.Olivier, The delegation authorization model: a model for the dynamic delegation of authorization rights in a secure workflow management system, in: ISSA2002, Muldersdrift, South Africa, 2002 (published electronically).
25. G. Vigna, Mobile Agents and Security, Springer, Berlin, Heidelberg, 1998.
26. D.S. Wallach, A new approach to mobile security, PhD thesis, Computer Science Department, Princeton University, 1999.
27. D. Wodtke and G. Weikum, A formal foundation for distributed workflow execution based on state charts, in: Proc. of the International Conference on Database Theory, Delphi, Greece, 1997.