Inter-instance authorization constraints for secure workflow management

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 190-199

  Warner, Janice ^a   Atluri, Vijayalakshmi ^a  

^a RUTGERS UNIVERSITY   (United States)

Author keywords

Authorization Constraints; Security; Workflow

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; CONSTRAINT THEORY; DATA FLOW ANALYSIS; SECURITY OF DATA;

AUTHORIZATION CONSTRAINTS; SEPARATION OF DUTY (SOD); WORKFLOW;

MANAGEMENT INFORMATION SYSTEMS;

EID: 33748053971     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133085     Document Type: Conference Paper

References (11)

1. E. Bertino, E. Ferrari, and V, Atluri. A Flexible Model Supporting the Specification and Enforcement of Role-based Authorizations in Workflow Management Systems. In Proc. of the end ACM Workshop on Role-based Access Control, November 1997.
2. E. Bertino, E. Ferrari, and V. Atluri. An Approach for the Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information Systems Security, 2(1), February 1999.
3. R.A. Botha and J.H.P. Eloff. Separation of duties for access control enforcement in workflow environments. IBM Systems Journal, 40(3), 2001.
4. J. Clifford and A. U. Tansel. On an algebra for historical relational databases: Two views. In Proceedings of the ACM SIGMOD, pages 247-265, May 1985.
5. J. Crampton. A reference monitor for workflow systems with constrained task execution. In Proceedings of the tenth ACM symposium on Access control models and technologies (SACMAT), pages 38-47, 2005.
6. D. Georgakopoulos, M. Hornick, and A. Sheth. An Overview of Workflow Management: From Process Modeling to Workflow Automation Infrastructure. Distributed and Parallel DBs, pages 119-153, 1995.
7. W. Huang and V. Atluri. Analyzing the Safety of Workflow Authorization Models. In Proc. of the 12th IFIP WG 11.3 Workshop on DB Security, July 1998.
8. J. Lloyd and R. Topor. Making prolog more expressive. Journal of Logic Programming, 3:225-240, 1984.
9. R. Sandhu. Transaction Control Expressions for Separation of Duties. In Fourth Computer Security Applications Conference, pages 282-286, 1988.
10. K. Tan, J. Crampton, and C. Gunter. The consistency of task-based authorization constraints in workflow systems. In IEEE Computer Security Foundations Workshop, 2004.
11. A. van Gelder, K. Ross, and J. Schlipf. The well-founded semantics for general logic programs. Journal of the ACM, 38(3):620-650, 1991.