Task-based entailment constraints for basic workflow patterns

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2008, Pages 51-60

  Wolter, Christian ^a   Schaad, Andreas ^a   Meinel, Christoph ^b  

^a SAP RESEARCH   (Germany)

^b UNIVERSITY OF POTSDAM   (Germany)

Author keywords

Access control; Separation of duty; Task based entailment constraints; Workflow management; Workflow modelling

Indexed keywords

FLOW PATTERNS; INFORMATION MANAGEMENT; MANAGEMENT; SECURITY SYSTEMS; WORK SIMPLIFICATION;

ACCESS CONTROL DECISIONS; COMPLEX CONTROLS; CONTROL COMMUNITIES; PARALLEL EXECUTIONS; PARTIAL ORDERS; PRIMARY SOURCES; SEPARATION OF DUTIES; SEPARATION OF DUTY; TASK-BASED ENTAILMENT CONSTRAINTS; WORKFLOW DESIGNS; WORKFLOW MANAGEMENT; WORKFLOW MANAGEMENT SYSTEMS; WORKFLOW MODELLING; WORKFLOW PATTERNS;

ACCESS CONTROL;

EID: 57349111770     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1377836.1377844     Document Type: Conference Paper

References (33)

1. Dimitrios Georgakopoulos, Mark F. Hornick, and Amit P. Sheth. An Overview of Workflow Management: From Process Modeling to Workflow Automation Infrastructure, Distributed and Parallel Databases, 3(2):119-153, 1995.
2. Andreas Schaad, Volkmar Lotz, and Karsten Sohr. A model-checking Approach to Analysing Organisational Controls in a Loan Origination Process. In SACM AT '06: Proceedings of the eleventh ACM Symposium, on Access Control Models and Technologies, pages 139-149, New York, NY, USA, 2006. ACM.
3. J. H. Saltzer and M. D. Schroeder. The Protection of Information in Computer Systems. In Proc. IEEE, volume 63, pages 1278-1308. IEEE Computer Society, 1975.
4. David D. Clark and David R, Wilson. A Comparison of Commercial and Military Computer Security Policies. Security and Privacy, 00:184, 1987.
5. M. Nash and K. Poland. Some Conundrums Concerning Separation of Duty. In In IEEE Symposium on Security and Privacy, pages 201-209, Oakland, CA, 1990.
6. R. A. Botha and J. H. P. Eloff. Separation of Duties for Access Control Enforcement in Workflow Environments. IBM System Journal, 40(3):666-682, 2001.
7. Elisa Bertino, Elena Ferrari, and Vijay Atluri. The Specification and Enforcement of Authorization Constraints in Workflow Management Systems. In ACM Transactions on Information and System Security, volume 2, pages 65-104, 1999.
8. Kaijun Tan, Jason Crampton, and Carl A. Gunter. The Consistency of Task-Based Authorization Constraints in Workflow Systems. In CSFW, pages 155-, 2004.
9. Christian Wolter and Andreas Schaad. Modeling of Task-Based Authorization Constraints in BPMN. In Proceedings of the 5th International Conference on Business Process Management (BPM), pages 64-79, 2007.
10. W. M. P. van der Aalst and A. H. M. ter Hofstede. Workflow Patterns: On the Expressive Power of Workflow Languages. In Proc. of the 4th Workshop on Practical Use of Coloured Petri Nets and the CPN Tools, Aarhus, Denmark, August 28-30, 2002 / Kurt Jensen (Ed,), pages 1-20. Technical Report DAIMI PB-560, August 2002.
11. P. Wohed, W.M.P. van der Aalst, M. Dumas, A.H.M. ter Hofstede, and N. Russell. On the Suitability of BPMN for Business Process Modelling. In Proceedings of the Jtth International Conference on Business Process Management (BPM), 2006.
12. W. M. P. van der Aalst. Pi calculus versus Petri nets: Let us eat humble pie rather than further inflate the Pi hype. In BPTrends 3, volume 5, pages 1-11, 2005.
13. Jason Crampton. A Reference Monitor for Workflow Systems with Constrained Task Execution. In SACM AT 'O5: Proceedings of the tenth ACM Symposium on Access Control Models and Technologies, pages 38-47, New York, NY, USA, 2005. ACM.
14. Shazia Wasim Sadiq, Guido Governatori, and Kioumars Namiri. Modeling Control Objectives for Business Process Compliance. In BPM, pages 149-164, 2007.
15. James H. Lambert, Rachel K. Jennings, and Nilesh N. Joshi. Integration of Risk Identification with Business Process Models. Syst. Eng., 9(3):187-198, 2006.
16. Roshan K. Thomas and Ravi S. Sandhu. Task-Based Authorization Controls (TBAC): A Family of Models for Active and Enterprise-Oriented Autorization Management. In IFIP Workshop on Database Security, pages 166-181, 1997.
17. Elisa Bertino, Jason Crampton, and Federica Paci. Access Control and Authorization Constraints for WS-BPEL, In ICWS, pages 275-284. IEEE Computer Society, 2006.
18. Jacques Thomas, Federica Paci, Elisa Bertino, and Patrick Eugster. User Tasks and Access Control over Web Services. In ICWS, pages 60-69. IEEE Computer Society, 2007.
19. N. Nagaratnam, A. Nadalin, M. Hondo, M. Mcintosh, and P. Austel. Business-driven application security: From Modeling to Managing Secure Applications. IBM Systems Journal, Vol 44, No 4, 2005.
20. Christian Wolter, Andreas Schaad, and Christoph Meinel. Deriving XACML Policies from Business Process Models. In WISE Workshops, pages 142-153, 2007.
21. Object Management Group. Business Process Modeling Notation Specification. www.bpmn.org, 2006.
22. N. Russell, W.M.P. van der Aalst, A.H.M. ter Hofstede, and D. Edmond. Workflow Resource Patterns: Identification, Representation and Tool Support. In In Proc. of 17th Int. Conf. on Advanced Information Systems Engineering (CAiSE05), 2005.
23. W. M. P. Van Der Aalst, A. H. M. Ter Hofstede, B. Kiepuszewski, and A. P. Barros. Workflow Patterns. Distrib. Parallel Databases, 14(1):5-51, 2003.
24. B. Kiepuszewski, A. Hofstede, and W. van der Aalst. Fundamentals of Control Flow in Workflows, 2002.
25. W.M.P. van der Aalst and A.H.M. ter Hofstede. YAWL: Yet Another Workflow Language. Information Systems, 30(4):245-275, 2005.
26. Ninghui Li and Qihua Wang. Beyond Separation of Duty: An Algebra for Specifying high-level Security Policies. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 356-369, New York, NY, USA, 2006. ACM.
27. Wei-kuang Huang and Vijayalakshmi Atluri. SecureFlow: A Secure Web-Enabled Workflow Management System. In ACM Workshop on Role-Based Access Control, pages 83-94, 1999.
28. Qihua Wang and Ninghui Li. Satisfiability and Resiliency in Workflow Systems. In ESORICS, pages 90-105, 2007.
29. Konstantin Knorr and Henrik Stromer. Modeling and Analyzing Separation of Duties in Workflow Environments. In Sec '01: Proceedings of the 16th international conference on Information security: Trusted information, pages 199-212, 2001.
30. David Basin, Jürgen Doser, and Torsten Lodderstedt. Model Driven Security for Process-Oriented Systems. In SACM AT '03: Proceedings of the eighth ACM Symposium on Access Control Models and Technologies, pages 100-109, 2003.
31. Jan Jürjens. UMLsec: Extending UML for Secure Systems Development. In UML '02: Proceedings of the 5th International Conference on The Unified Modeling Language, pages 412-425, 2002.
32. Alfonso Rodríguez, Eduardo Fernández-Medina, and Mario Piattini. Towards a UML 2.0 Extension for the Modeling of Security Requirements in Business Processes. In TrustBus, pages 51-61, 2006.
33. Nick Russell, Arthur, Wil M. P. van der Aalst, and Natalya Mulyar. Workflow Control-Flow Patterns: A Revised View. Technical report, BPMcenter.org, 2006.