Secure workflow development from early requirements analysis

Proceedings of the 6th IEEE European Conference on Web Services, ECOWS'08

Volumn , Issue , 2008, Pages 125-134

  Séguran, Magali ^a   Hébert, Cédric ^a   Frankova, Ganna ^b  

^a SAP Research Security and Trust   (France)

^b UNIVERSITY OF TRENTO   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ELECTRONIC COMMERCE; MANAGEMENT; REQUIREMENTS ENGINEERING; WEB SERVICES;

BUSINESS PROCESSING; CASE STUDIES; DESIGN METHODOLOGIES; E BUSINESS; RUN TIME; SOFTWARE DEVELOPMENT PROCESSES; WORK-FLOWS; WORKFLOW ENGINES;

WORLD WIDE WEB;

EID: 58449093195     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ECOWS.2008.13     Document Type: Conference Paper

References (33)

1. Business Process Execution Language for Web Services 1.1, May 2003.
2. Web Services Trust Language (WS-Trust), February 2005.
3. Web Services Federation Language (WS-Federation) 1.1, December 2006.
4. Web Services Security: SOAP Message Security (WS-Security) 1.1, February 2006.
5. Web Services Business Process Execution Language 2.0, April 2007.
6. WS-BPEL Extension for People (BPEL4People) 1.0, June 2007.
7. M. Aiello and P. Giorgini. Applying the Tropos Methodology for Analysing Web Services Requirements and Reasoning about Qualities of Services. CEPIS Upgrade - The European journal of the informatics professional, 5(4):20-26, 2004.
8. P. Bresciani, A. Perini, P. Giorgini, F. Giunchiglia, and J. Mylopoulos. TROPOS: An Agent-Oriented Software Development Methodology. Journal of Autonomous Agents and Multi-Agent Systems, 8(3):203-236, 2004.
9. J. Castro, M. Kolp, and J. Mylopoulos. Towards Requirements-Driven Information Systems Engineering: The Tropos Project. Information Systems, 27(6):365-389, September 2002.
10. B. H. C. Cheng, S. Konrad, L. Campbell, and R. Wasser-mann. Using Security Patterns to Model and Analyze Security Requirements. In IEEE Workshop on Requirements for High Assurance Systems, 2003.
11. E. Colombo, J. Mylopoulos, and P. Spoletini. Modeling and Analyzing Context-aware Composition of Services. In Proceedings of International Conference on Service-Oriented Computing, 2005.
12. D. Domingos, A. Rito Silva, and P. Veiga. Workflow Access Control from a Business Perspective. In Proceedings of the International Conference on Enterprise Information Systems, 2004.
13. G. Frankova, F. Massacci, and M. Seguran. From Early Requirements Analysis towards Secure Workflows. In Proceedings of the joint iTrust and PST Conferences on Privacy, Trust Management and Security, 2007.
14. G. Frankova, F. Massacci, and M. Seguran. From Early Requirements Analysis towards Secure Workflows. Technical Report DIT-07-036, University of Trento, May 2007.
15. A. Fuxman, L. Liu, j. Mylopoulos, M. Pistore, M. Roveri, and P. Traverso Specifying and Analyzing Early Requirements in Tropos. Requirements Engineering, 9(2): 132-150, May 2004.
16. G. Georg, I. Ray, and R. France. Using Aspects to Design a Secure System. In Proceedings of IEEE International Conference on Engineering of Complex Computer Systems, 2002.
17. P. Giorgini, F. Massacci, J. Mylopoulos, and N. Zannone. Requirements Engineering for Trust Management: Model, Methodology, and Reasoning. International Journal of Information Security, 5(4):257-274, October 2006.
18. C. Haley, R. Laney, and B. Nuseibeh. Deriving Security Requirements from Crosscutting Threat Descriptions. In Proceedings of International Conference on Aspect-Oriented Software Development, 2004.
19. J. Jürjens. Secure Systems Development with UML. Springer-Verlag, 2004.
20. R. Kaabi, C. Souveyet, and C. Rolland. Eliciting Service Composition in a Goal Driven Manner. In Proceedings of International Conference on Service Oriented Computing, 2004.
21. R. Kazhamiakin, M. Pistore, and M. Roveri. A Framework for Integrating Business Processes and Business Requirements. In Proceeding of the Enterprise Distributed Object Computing Conference, 2004.
22. D. Lau and J. Mylopoulos. Designing Web Services with Tropos. In Proceedings of IEEE International Conference on Web Services, 2004.
23. F. Massacci, J. Mylopoulos, and N. Zannone. An Ontology for Secure Socio-Technical Systems. Handbook of Ontologies for Business Interaction, 2007.
24. T. Neubauer, M. Klemen, and S. Biffl. Secure Business Process Management: A Roadmap. In Proceedings of International Conference on Availability, Reliability and Security, 2006.
25. M. Papazoglou and J. Yang. Design Methodology for Web Services and Business Processes. In Proceedings of the International Workshop on Technologies for E-Services, 2002.
26. L. Penserini, A. Perini, A. Susi, and J. Mylopoulos. From Stakeholder Needs to Service Requirements. In Proceeding of International Workshop on Service-Oriented Computing: Consequences for Engineering Requirements, 2006.
27. G. Sindre and A. Opdahl. Eliciting Security Requirements with Misuse Cases. Requirements Engineering, 10(1):34-44, January 2005.
28. A. Susi, A. Perini, J. Mylopoulos, and P. Giorgini. The Tropos Metamodel and its Use. Informatica, 29:401-408, 2005.
29. Trusted Computing Group. TCG Specification Architecture Overview Revision 1.2, April 2003.
30. A. van Lamsweerde, S. Brohez, R. De Landtsheer, and D. Janssens. From System Goals to Intruder Anti-Goals: Attack Generation and Resolution for Security Requirements Engineering. In Proceedings of Workshop on Requirements for High Assurance Systems, 2003.
31. M. Weiss and D. Amyot. Business Process Modeling with URN. International Journal of E-Business Research, l(3):63-90, 2005.
32. C. Wolter, H. Plate, and C. Hebert. Collaborative Workflow Management for eGovernment. In Pinceedings of the International Conference on Database and Expert Systems Applications, 2007.
33. C. Wolter and A. Schaad. Modeling of Task-Based Authorization in BPMN. In Proceedings of the International Conference on Business Process Management, 2007.