SECTET - An extensible framework for the realization of secure inter-organizational workflows

Proceedings of the 4th International Workshop on Security in Information Systems, WOSIS 2006, in Conjunction with ICEIS 2006

Volumn , Issue , 2006, Pages 47-57

  Hafner, Michael ^a   Breu, Ruth ^a   Agreiter, Berthold ^a   Nowak, Andrea ^b  

^a UNIVERSITY OF INNSBRUCK   (Austria)

^b ARC SEIBERSDORF RESEARCH GMBH   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

COST-EFFICIENT; DIGITAL SIGNATURE; E-GOVERNMENT; EXTENSIBLE FRAMEWORK; INTER-ORGANIZATIONAL WORKFLOWS; LEGAL REQUIREMENTS; MODEL-DRIVEN; SECURITY PATTERNS; WORK-FLOWS;

GOVERNMENT DATA PROCESSING; INFORMATION SYSTEMS;

MANAGEMENT;

EID: 77954114693     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (30)

1. W.M.P. van der Aalst.: Loosely Coupled Inter-organizational Workflows. In: Information and Management 37 (2000) 2, pp. 67-75.
2. D. Basin, J. Doser, T. Lodderstedt: Model Driven Security for Process-Oriented Systems. In 8th ACM Symposium on Access Control Models and Technologies. ACM Press, 2003.
3. IBM and Microsoft. 2002: Security in a Web Services World. A joint security whitepaper from IBM Corporation and Microsoft Corporation. April 2002, Version 1.0.
4. Austrian Signature Act (Signaturgesetz - SigG), Art. 1 of the Act published in the Austrian Federal Law Gazette, part I, Nr. 190/1999.
5. M. Hafner et al.: Model Driven Security for Inter-Org. Workflows in E-Gov. To Appear in: A. Mitrakas et al. (Eds.): Secure E-Government Web Services. Idea Group, Inc, 2006.
6. R. Breu et al.: Web Service Engineering - Advancing a New Software Engineering Discipline. In: D. Lowe, M. Gaedke (Eds.): Web Engineering, ICWE 2005, Sydney, Australia, July 2005, Proc. LNCS 3579 Springer 2005, ISBN 3-540-27996-2.
7. M. Hafner et al.: Modeling Inter-org. Workflow Security in a Peer-to-Peer Environment. In: R. Bilof (Ed.): Proc. of the 2005 IEEE International Conference on Web Services, ICWS 2005, Orlando, USA, 2005, IEEE Conference Publishing Services, ISBN 0-7695-2409-5.
8. T. Andrews et al.: Business Process Execution Language for Web Services, Version 1.1., BEA, IBM, Microsoft, SAP, Siebel (2003).
9. OASIS: ebXML Business Process Specification Schema Version 1.01. OASIS, 2001.
10. M. Bernauer et al., "Comparing WSDL-based and ebXML-based Approaches for B2B Protocol Specification". In: Proc. of the 1st Int. Conf. on Service-Oriented Computing (ICSOC), Trento, 2003.
11. A. Arkin: Business Process Modeling Language - BPML1.0, Working Draft, 2002.
12. N. Mitra, N.: SOAP Version 1.2 Part 1: Messaging Framework. W3C Rec. 24/06/2003.
13. Eastlake, D. et al., (eds.): XML-Signature Syntax and Processing. W3C Rec. 14/02/2002
14. Eastlake, D. et al. (eds.): XML Encryption Syntax and Processing. W3C Rec. 10/12/2002.
15. T. Moses et al. (eds.): XACML Profile for Web-Services. XACML Working draft, v. 4/09/2003.
16. P. Mishra et al. (eds.): Conformance Requirements for the OASIS Security Assertion Markup Language (SAML) V2.0. Committee Draft 02, 24/09/2004.
17. S. Bajaj, et al.,:Web Services Policy Framework (WS-Policy). 09/2004.
18. E. Bertino, S. Castano, E. Ferrari: Securing XML Documents with Author X. In: IEEE Internet Computing 5 (2001) 3, pp. 21-31.
19. D. W. Chadwick: RBAC Policies in XML for X.509 Based Privilege Management. In: Proc. of the 17th Int. Conf. on Information Security: Visions and Perspectives 2002
20. http://www.eu-trustcom.com/
21. P. Grefen et al.: CrossFlow: Cross-org. Workflow Man. in Dynamic Virtual Enterprises. In: Int. Journal of Computer Systems Science & Engineering 15 (2000) 5, pp. 277-290.
22. F. Casati and M. Shan: Event-based Interaction Management for Composite E-Services in eFlow. In: Information Systems Frontiers 4 (2002) 1, pp. 19-31.
23. M. Dijkman, M. Dumas: Service-Oriented Design: A Multi-Viewpoint Approach. Int. Journal of Cooperative Information Systems 13(4): 337-368 (2004).
24. E. Gudes, M. Olivier, R. van de Riet.: Modelling, Specifying and Implementing Workflow Security in Cyberspace. In: Journal of Computer Security 7 (1999) 4, pp. 287-315.
25. W.K. Huang, V. Atluri: SecureFlow: A secure Web-enabled Workflow Management System. In: ACM Workshop on Role-Based Access Control 1999, p. 83-94.
26. J. Wainer et al.: W-RBAC - A Workflow Security Model Incorporating Controlled Overriding of Constraints. In: International Journal of Cooperative Information Systems. 12 (2003) 4, pp. 455-485.
27. M. Alam et al.: Model Driven Security for Web Services. In: Proc. of the 8th International Multi-topic Conference (INMIC 2004), IEEE, Lahore, 2004.
28. http://www.oracle.com/technology/products/ias/bpel/index.html
29. J. Mendling, M. Hafner: From Inter-Organizational Workflows to Process Execution: Generating BPEL from WS-CDL. In conf. and workshop proc. MIOS 2005. R. Meersmann et al. (Eds.): LNCS 3762, pp. 305-315, 2005.
30. K. Mantell: From UML to BPEL. IBM-developerWorks, 2003.