Managing access and flow control requirements in distributed workflows

AICCSA 08 - 6th IEEE/ACS International Conference on Computer Systems and Applications

Volumn , Issue , 2008, Pages 702-710

  Ayed, Samiha ^a   Cuppens Boulahia, Nora ^a   Cuppens, Frédéric ^a  

^a ECOLE DES MINES DE NANTES   (France)

Author keywords

DTE; OrBAC; Petri nets; Security policy; WFMS

Indexed keywords

COMPUTER APPLICATIONS; COMPUTER SYSTEMS; CONTROL SYSTEMS; FLOW CONTROL; PUBLIC POLICY; SECURITY OF DATA; SECURITY SYSTEMS;

CENTRALIZED MANAGEMENT; CONTROL REQUIREMENTS; DTE; DYNAMIC APPROACH; INTER-ORGANIZATIONAL SYSTEMS; INTER-ORGANIZATIONAL WORKFLOWS; INTERNATIONAL CONFERENCES; MANAGEMENT SYSTEMS; OPERATIONAL BUSINESS; ORBAC; PETRI NETS; RESEARCH WORKS; SECURITY POLICIES; SECURITY POLICY; STATIC ACCESS CONTROL; WFMS; WORK-FLOWS;

ACCESS CONTROL;

EID: 50049095080     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AICCSA.2008.4493605     Document Type: Conference Paper

References (18)

1. A. Abou El Kalam, et al (2003). Organization Based Access Control. IEEE 4th International Workshop on Policies for Distributed Systems and Networks, Italy.
2. E. Bertino, E. Ferrari, V. Alturi (1999). The Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information and System Security.
3. F. Cuppens, N. Cuppens-Boulahia, and A. Miège (2004). Inheritance hierarchies in the Or-BAC model and application in a network environment. Second Foundations of Computer Security Workshop (FCS'04). Turku, Finlande.
4. F. Cuppens and A. Miège (2003). Modelling contexts in the Or-BAC model. 19th Annual Computer Security Applications Conference, Las Vegas.
5. F. Cuppens, N. Cuppens-Boulahia, T. Sans and A. Miège (2004). A formal approach to specify and deploy a network security policy. Second Workshop on Formal Aspects in Security and Trust. Toulouse, France.
6. F. Cuppens, N. Cuppens-Boulahia et T. Sans (2005). Nomad: A Security Model with Non Atomic Actions and Deadlines. 18th IEEE Computer Security Foundations Workshop (CSFW'05), Aix-en-Provence, France.
7. James F. Allen (1993). Towards a General Theory of Action and Time. Proceedings of the Fifteenth Annual Conference of the Cognitive Science Society.
8. J. Kiszka, B. Wagner (2003). Domain and Type Enforcement for Real-Time Operating Systems. Proceedings of Emerging Technologies and Factory Automation.
9. Lee Badger, Daniel F. Sterne, David L. Sherman, Kenneth M. Walker, Sheila A. Haghighat (1995). Practical Domain and Type Enforcement for Unix. IEEE Symposium on Security and Privacy. Oakland, CA, USA.
10. N.R. Adam, V. Atluri and W-K. Huang. Modeling and Analysis of Workflows Using Petri Nets (1998). Journal of Intelligent Information Systems, Special Issue on Workflow and Process Management, Volume 10.
11. P. Hung, Karlapalem (1999). A Secure Workflow Model. Australian Information Security Workshop.
12. R. Sandhu (1996). Role Hierarchies and Constraints for Lattice-Based Access Controls. Proc. Fourth European Symposium on Research in Computer Security. Rome, Italy.
13. René David, Hassane Alla (1992). Du grafcet aux réseaux de Petri, Hermès. Paris, 2nd edition.
14. V. Atluri, W. Huang. An authorization Model for Workflows (1996). Proceedings of the Fifth European Symposium on Research in Computer Security, Rome, Italy, pages 44-64.
15. V. Atluri and W. Huang (1997). Enforcing Mandatory and Discretionary security in Workflow Management Systems. Journal of Computer Security, 5(4):303-339.
16. V. Atluri, W. Huang, Elisa Bertino (2000). A semantic Based Execution Model for Multilevel Secure Workflows. Journal of Computer Security, 8(1).
17. W. E. Boebert, R. Y. Kain (1996). A further Note on the Confinment Problem. Proceedings of the IEEE 1996 International Carnahan Conference on Security Technology. New York: IEEE Computer Society.
18. W. Huang, V. Atluri (1999). SecureFlow: A Secure Web-enabled Workflow Management System. Proceedings of the fourth ACM workshop on Role-based access control, p.83-94, Fairfax, Virginia, United States.