The consistency of task-based authorization constraints in workflow systems

Proceedings of the Computer Security Foundations Workshop

Volumn 17, Issue , 2004, Pages 155-169

  Tan, Kaijun ^a   Crampton, Jason ^b   Gunter, Carl A ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHORIZATION CONSTRAINTS; CONSTRAINT MODELS; SECURITY POLICIES; WORKFLOW SYSTEMS;

COMPUTATIONAL COMPLEXITY; OPTIMIZATION; PROBLEM SOLVING; SECURITY OF DATA; SET THEORY; SOCIETIES AND INSTITUTIONS;

CONSTRAINT THEORY;

EID: 4944250730     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. G.-J. Ahn and R. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and Systems Security, 3(4):207-226, 2000.
2. G.-J. Ahn, R. Sandhu, M. Kang, and I. Park. Injecting RBAC to secure a web-based workflow system. In Proceedings of the 5th ACM Workshop on Role-Based Access Control, pages 1-10, 2000.
3. V. Atluri, S. Chun, and P. Mazzoleni. A Chinese wall security model for decentralized workflow systems. In 8th ACM Conference on Computer and Communication Security, pages 48-57, 2001.
4. V. Atluri and W. Huang. An authorization model for workflow. In Proceedings of the Fifth Europe Symposium on Research in Computer Security, pages 44-64. Lecture Notes in Computer Science, 1996.
5. E. Bertino, E. Ferrari, and V. Atluri. The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security, 2(1):65-104, 1999.
6. R. Botha and J. Eloff. Separation of duties for access control enforcement in workflow environments. IBM Systems Journal, 40(3):666-681, 2001.
7. D. Brewer and M. Nash. The Chinese Wall security policy. In Proceedings of 1989 IEEE Symposium on Security and Privacy, pages 206-214, Oakland, California, 1989. TPP.F Computer Society Press.
8. F. Casati, S. Castano, and M. Fugini. Managing workflow authorization constraints through active database technology. Information Systems Frontiers, 3(3):319-338, 2001. Technical Report HPL-2000-156, Hewlett Packard Laboratories.
9. T. Cormen, C. Leiserson, R. Rivest, and C. Stein. Introduction to Algorithms. MTT Press, 2nd edition, 2002.
10. J. Crampton. Specifying and enforcing constraints in rolebased access control. In Proceedings of the Eighth ACM symposium on Access control models and Technologies, pages 43-50, 2003.
11. D. Georgakopoulos, M. Hornick, and A. Sheth. An overview of workflow management: From process modelling to workflow automation infrastructure. Distributed and Parallel Databases, 3(2):119-153, 1995.
12. V. Gligor, S. Gavrila, and D. Ferraiolo. On the formal definition of separation-of-duty policies and their composition. In Proceedings of 1998 IEEE Symposium on Research in Security and Privacy, pages 172-183, Oakland, California, 1998.
13. W. Huang and V. Atluri. Securefiow: A secure web-enabled workflow management system. In ACM Workshop on Role-Based Access Control, pages 83-94, 1999.
14. M. Kang, J. Park, and J. Froscher. Access control mechanisms for inter-organizational workflow. In Proceedings of the 6th ACM Symposium on Access Control Models and Technologies, pages 66-74, 2001.
15. K. Knorr and H. Stormer. Modeling and analyzing separation of duties in workflow environment. In Proceedings of 16th International Conference on Information Security, pages 199-212, 2001.
16. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Rolebased access control models. IEEE Computer, 29(2):38-47, 1996.
17. R. Simon and M. Zurko. Separation of duty in role-based environments. In Proceedings of 10th IEEE Computer Security Foundations Workshop, pages 183-194, Rockport, Massachusetts, 1997.
18. J. Wainer, P. Barthelmess, and A. Kumar. W-RBAC - A workfiow security model incorporating controlled overriding of constraints. International Journal of Cooperative Information System, 12(4):455-486, 2003.