Scientific workflow provenance querying with security views

Proceedings - The 9th International Conference on Web-Age Information Management, WAIM 2008

Volumn , Issue , 2008, Pages 349-356

  Chebotko, Artem ^a   Chang, Seunghan ^a   Lu, Shiyong ^a   Fotouhi, Farshad ^a   Yang, Ping ^b  

^a Wayne State University   (United States)

^b State University of New York at Binghamton   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACTING; ACCESS CONTROL; ADMINISTRATIVE DATA PROCESSING; INFORMATION SCIENCE; MANAGEMENT; MANAGEMENT INFORMATION SYSTEMS; MECHANISMS; METADATA; PUBLIC POLICY; SECURITY OF DATA; SECURITY SYSTEMS;

ABSTRACTION LEVELS; ACCESS-CONTROL MECHANISMS; CONFLICT RESOLUTIONS; DATA PRODUCTS; GRANULARITY LEVELS; INTERNATIONAL CONFERENCES; SCIENTIFIC WORKFLOW; SECURITY POLICIES;

INFORMATION MANAGEMENT;

EID: 51849083449     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WAIM.2008.41     Document Type: Conference Paper

References (41)

1. Workflow security consideration - white paper. In Workflow Management Coalition, February 1998. WFMC-TC-1019.
2. G. Ahn, R. Sandhu, M. Kang, and J. Park. Injecting RBAC to secure a web-based workflow system. In Proc. of the fifth ACM Workshop on RBAC, pages 1-10, 2000.
3. J. Alhiyafi, C. Sabesan, S. Lu, and J. Ram. RE-COMBFLOW: A scientific workflow environment for intragenomic gene conversion analysis. Int. J. of Bioinformatics Research and Applications, 2008. In press.
4. V. Atluri and W. Huang. An authorization model for workflows. In Proc. of the fourth European Symposium on Research in Computer Security, pages 44-64, 1996.
5. V. Atluri, W. Huang, and E. Bertino. A semantic-based execution model for multilevel secure workflows. Journal of Computer Security, 8(1), 2000.
6. V. Atluri and J. Warner. Security for workflow systems. Handbook of Database Security Applications and Trends, pages 213-230, 2007.
7. E. Bertino, E. Ferrari, and V. Atluri. The specification and enforcement of authorization constraints in workflow management systems. ACM Trans. Inf. Syst. Secur., 2(1):65-104, 1999.
8. O. Biton, S. Cohen-Boulakia, S. Davidson, and C. Hara. Querying and managing provenance through user views in scientific workflows. In Proc. of the Twenty-Fourth IEEE Int. Conf. on Data Engineering, 2008. To appear.
9. R. Bose and J. Frew. Lineage retrieval for scientific data processing: a survey. ACM Comput. Surv., 37(1):1-28, 2005.
10. R. Botha and J. Eloff. A security interpretation of the workflow reference model. In Proc. of the Inf. Secur. -from Small Syst. to Management of Secure Infrastr., pages 43-51, 1998.
11. R. A. Botha and J. H. P. Eloff. Separation of duties for access control enforcement in workflow environments. End-to-end Security, 40(3), 2001.
12. U. Braun and A. Shinna. A security model for provenance. Technical Report TR-04-06, Harvard University, 2006.
13. A. Chebotko, X. Fei, C. Lin, S. Lu, and F. Fotouhi. Storing and querying scientific workflow provenance metadata using an RDBMS. In Proc. of the IEEE International Workshop on Scientific Workflows and Business Workflow Standards in e-Science, pages 611-618, 2007.
14. H. Chivers and J. McDermid. Refactoring service-based systems: how to avoid trusting a workflow service. Concurr. Comput.: Pract. Exper., 18(10):1255-1275, 2006.
15. D. Churches, G. Gombas, A. Harrison, J. Maassen, C. Robinson, M. Shields, I. Taylor, and I. Wang. Programming scientific and distributed workflow with Triana services. Concurrency and Computation: Practice and Experience, 18(10):1021-1037, 2006.
16. S. Cohen, S. Cohen-Boulakia, and S. Davidson. Towards a model of provenance and user views in scientific workflows. In Proc. of the Third International Workshop on Data Integration in the Life Sciences (DILS), pages 264-279, 2006.
17. H. Davulcu, M. Kifer, L. Pokorny, C. Ramakrishnan, I. Ramakrishnan, and S. Dawson. Modeling and analysis of interactions in virtual enterprises. In Proc. of the Ninth Int. Workshop on Research Issues on Data Engineering, 1999.
18. E. Deelman, G. Singh, M.-H. Su, J. Blythe, Y. Gil, C. Kesselman, G. Mehta, K. Vahi, G. B. Berriman, J. Good, A. Laity, J. C. Jacob, and D. S. Katz. Pegasus: a framework for mapping complex scientific workflows onto distributed systems. Scientific Programming J., 13(3):219-237, 2005.
19. D. Domingos, A. Silva, and P. Veiga. Workflow access control from a business perspective. In Proc. of the Int. Conf. on Enterprise Information Systems, pages 18-25, 2004.
20. I. Foster, J. Vöckler, M. Wilde, and Y. Zhao. Chimera: A virtual data system for representing, querying, and automating data derivation. In Proc. of the Int. Conf. on Scientific and Statistical Database Management (SSDBM), 2002.
21. J. Freire, C. T. Silva, S. P. Callahan, E. Santos, C. E. Scheidegger, and H. T. Vo. Managing rapidly-evolving scientific workflows. In Proc. of the International Provenance and Annotation Workshop (IPAW), 2006.
22. E. Gudes, M. Olivier, and R. Riet. Modelling, specifying and implementing workflow security in cyberspace. Journal of Computer Security, 7(4):287-315, 1999.
23. G. Herrmann and G. Pernul. Toward security semantics in workflow management. In Proc. of the Thirty-First Annual Hawaii International Conference on System Sciences, 1998.
24. W. Huang and V. Atluri. Analysing the safety of workflow authorization models. In Proc. of the IFIP TC11 WG 11.3 Int. Working Conf. on Database Secur., pages 43-57, 1999.
25. W. Huang and V. Atluri. SecureFlow: a secure Webenabled workflow management system. In Proc. of the fourth ACM Workshop on Role-based Access Control, pages 83-94, 1999.
26. P. Hung and K. Karlapalem. A secure workflow model. In Proc. of the Australasian Information Security Workshop Conference on ACSW Frontiers, 2003.
27. S. Kandala and R. Sandhu. Secure role-based workflow models. In Proc. of the Fifteenth Annual Working Conf. on Database and Application Security, pages 45-58, 2001.
28. M. Kang, J. Park, and J. Froscher. Access control mechanisms for inter-organizational workflow. In Proc. of the sixth ACM Symposium on Access Control Models and Technologies, pages 66-74, 2001.
29. D. Long, J. Baker, and F. Fung. A prototype secure workflow server. In Proc. of the Fifteenth Annual Computer Security Applications Conference, page 129, 1999.
30. B. Ludascher, I. Altintas, C. Berkley, D. Higgins, E. Jaeger, M. Jones, E. A. Lee, J. Tao, and Y. Zhao. Scientific workflow management and the Kepler system. Concurr. Comput.: Pract. Exper., 18(10):1039-1065, 2006.
31. R. Martinho, D. Domingos, and A. Rito-Silvas. Supporting authentication requirements in workflows. In Proc. of the Eighth Int. Conf. on Enterprise Inf. Syst.: Databases and Information Systems Integration, pages 181-188, 2006.
32. S. Miles, P. Groth, M. Branco, and L. Moreau. The requirements of recording and using provenance in e-science experiments. Journal of Grid Computing, 2006.
33. T. M. Oinn, M. Addis, J. Ferris, D. Marvin, M. Senger, R. M. Greenwood, T. Carver, K. Glover, M. R. Pocock, A. Wipat, and P. Li. Taverna: a tool for the composition and enactment of bioinformatics workflows. Bioinformatics, 20(17):3045-3054, 2004.
34. R. Sandhu. Transaction control expressions for separation of duties. In Proc. of the Fourth Computer Security Applications Conference, pages 282-286, 1988.
35. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Rolebased access control models. IEEE Computer, 29(2):38-47, 1996.
36. Y. Simmhan, B. Plale, and D. Gannon. A survey of data provenance in e-science. SIGMOD Rec., 34(3):31-36, 2005.
37. V. Tan, P. Groth, S. Miles, S. Jiang, S. Munroe, S. Tsasakou, and L. Moreau. Security issues in a SOA-based provenance system. In Proc. of the third Int. Provenance and Annotation Workshop (IPAW), 2006.
38. J. Wainer, P. Barthelmess, and A. Kumar. W_RBAC - a workflow security model incorporating controlled overriding of constraints. Int. J. Cooperative Inf. Syst., 12(4):455-485, 2003.
39. J. Warner and V. Atluri. Inter-instance authorization constraints for secure workflow management. In Proc. of the eleventh ACM Symposium on Access Control Models and Technologies, pages 190-199, 2006.
40. S. Wu, A. Sheth, J. Miller, and Z. Luo. Authorization and access control of application data in workflow systems. Journal of Intelligent Information Systems, 18(1):71-94, 2002.
41. Y. Zhao, M. Hategan, B. Clifford, I. Foster, G. von Laszewski, I. Raicu, T. Stef-Praun, and M. Wilde. Swift: Fast, reliable, loosely coupled parallel computation. In Proc. of the Int. Workshop on Scientific Workflows (SWF), 2007.