Bridging Security and Fault Management within Distributed Workflow Management Systems

IEEE Transactions on Services Computing

Volumn 1, Issue 1, 2008, Pages 33-48

  Montagut, Frederic ^a   Molva, Refik ^b  

^a SAP RESEARCH   (Germany)

^b EURECOM   (France)

Author keywords

Decentralized workflows; fault management; security

Indexed keywords

BUSINESS PARTNERS; CO-ORDINATION FRAMEWORKS; CRITICAL ISSUES; DECENTRALIZED WORKFLOWS; DISTRIBUTED EXECUTIONS; DISTRIBUTED WORKFLOW; ENCRYPTION TECHNIQUES; FAULT MANAGEMENT; MALICIOUS PEERS; RUN-TIME; SECURE EXECUTIONS; SECURITY; SECURITY FEATURES; SECURITY MECHANISMS; SECURITY POLICY MODELS; SECURITY SOLUTIONS; WORKFLOW EXECUTIONS; WORKFLOW MANAGEMENT SYSTEMS;

ARSENIC; CRYPTOGRAPHY; INFORMATION MANAGEMENT; SECURITY SYSTEMS; WORK SIMPLIFICATION;

MANAGEMENT;

EID: 77956949549     PISSN: 19391374     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSC.2008.3     Document Type: Article

References (43)

1. D. Barbara, S. Mehrotra, and M. Rusinkiewicz, “INCAs: Managing Dynamic Workflows in Distributed Environments,” J. Database Management, vol. 7, no. 1, 1996
2. F. Montagut and R. Molva, “Enabling Pervasive Execution of Workflows,” Proc. First IEEE Int'l Conf. Collaborative Computing: Networking, Applications, and Worksharing, 2005
3. V. Atluri, S.A. Chun, and P. Mazzoleni, “A Chinese Wall Security Model for Decentralized Workflow Systems,” Proc. Eighth ACM Conf. Computer and Comm. Security (CCS '01), pp. 48–57, 2001
4. S. Chou, A. Liu, and C. Wu, “Preventing Information Leakage within Workflows that Execute among Competing Organizations,” J. Systems Software, vol. 75, nos. 1–2, pp. 109–123, 2005
5. M.H. Kang, J.S. Park, and J.N. Froscher, “Access Control Mechanisms for Inter-Organizational Workflow,” Proc. Sixth ACM Symp. Access Control Models and Technologies (SACMAT '01), pp. 66–74, 2001
6. P.F. Syverson, D.M. Goldschlag, and M.G. Reed, “Anonymous Connections and Onion Routing,” Proc. IEEE Symp. Security and Privacy, pp. 44–54, 1997
7. F. Montagut and R. Molva, “Augmenting Web Services Composition with Transactional Requirements,” Proc. IEEE Int'l Conf. Web Services (ICWS '06), Sept. 2006
8. F. Montagut and R. Molva, “Enforcing Integrity of Execution in Distributed Workflow Management Systems,” Proc. Int'l Conf. Services Computing (SCC '07), July 2007
9. F. Montagut and R. Molva, “Traceability and Integrity of Execution in Distributed Workflow Management Systems,” Proc. European Symp. Research in Computer Security (ESORICS '07), Sept. 2007
10. F. Montagut and R. Molva, “Towards Transactional Pervasive Workflows,” Proc. 10th IEEE Int'l Conf. Enterprise Computing (EDOC '06), Oct. 2006
11. Open System Interconnection-Distributed Transaction Processing (OSITP) Model (ISO IS 100261), 1992
12. W. Bagga and R. Molva, “Policy-Based Cryptography and Applications,” Proc. Ninth Int'l Conf. Financial Cryptography and Data Security (FC '05), Mar. 2005
13. G. Ateniese, J. Camenisch, M. Joye, and G. Tsudik, “A Practical and Provably Secure Coalition-Resistant Group Signature Scheme,” Lecture Notes in Computer Science, vol. 1880, pp. 255–271, 2000
14. D. Boneh and M.K. Franklin, “Identity-Based Encryption from the Weil Pairing,” Advances in Cryptology—Proc. 21st Ann. Int'l Cryptology Conf. (CRYPTO '01), pp. 213–229, 2001
15. K. Paterson, “ID-Based Signatures from Pairings on Elliptic Curves,” Electronics Letters, vol. 38, no. 18, pp. 1025–1026, 2002
16. L. Owens, A. Duffy, and T. Dowling, “An Identity Based Encryption System,” Proc. Third Int'l Symp. Principles and Practice of Programming in Java (PPPJ '04), pp. 154–159, 2004
17. Bouncy Castle, http://www.bouncycastle.org, 2007
18. Business Process Execution Language for Web Sevices, http://www.ibm.com/developerworks/library/ws-bpel, 2008
19. C. Li and C. Pahl, “Security in the Web Services Framework,” Proc. First Int'l Symp. Information and Comm. Technologies (ISICT '03), pp. 481–486, 2003
20. E. Bertino, E. Ferrari, and V. Atluri, “The Specification and Enforcement of Authorization Constraints in Workflow Management Systems,” ACM Trans. Information and System Security, vol. 2, no. 1, pp. 65–104 1999
21. D.F.C. Brewer and M.J. Nash, “The Chinese Wall Security Policy,” Proc. IEEE Symp. Security and Privacy, pp. 206–214, 1989
22. R.T. Simon and M.E. Zurko, “Separation of Duty in Role-Based Environments,” Proc. IEEE Computer Security Foundations Workshop, pp. 183–194, 1997
23. P.C.K. Hung, “From Conflict of Interest to Separation of Duties in WS-Policy for Web Services Matchmaking Process,” Proc. 37th Ann. Hawaii Int'l Conf. System Sciences—Track 3 (HICSS '04), p. 30066.2, vol. 3, 2004
24. R.S. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman, “Role-Based Access Control Models,” Computer, vol. 29, no. 2, pp. 38–47, Feb. 1996
25. R. Wonohoesodo and Z. Tari, “A Role Based Access Control for Web Services,” Proc. IEEE Int'l Conf. Services Computing (SCC '04), pp. 49–56, 2004
26. G.-J. Ahn, R. Sandhu, M.H. Kang, and J.S. Park, “Injecting RBAC to Secure a Web-Based Workflow System,” Proc. Fifth ACM Workshop on Role-Based Access Control, pp. 1–10, 2000
27. W.T. Tsai, X. Liu, and Y. Chen, “Distributed Policy Specification and Enforcement in Service-Oriented Business Systems,” Proc. IEEE Int'l Conf. e-Business Eng. (ICEBE '05), pp. 10–17, 2005
28. V. Atluri and W.-K. Huang, “An Authorization Model for Workflows,” Proc. Fourth European Symp. Research in Computer Security, pp. 44–64, 1996
29. H. Koshutanski and F. Massacci, “An Access Control Framework for Business Processes for Web Services,” Proc. ACM Workshop XML Security (XMLSEC '03), pp. 15–24, 2003
30. E. Bertino, J. Crampton, and F. Paci, “Access Control and Authorization Constraints for WS-BPEL,” Proc. IEEE Int'l Conf. Web Services (ICWS '06), pp. 275–284, 2006
31. “OASIS eXtensible Access Control Markup Language (XACML),” 2005
32. J.S. Park and J. Hwang, “Role-Based Access Control for Collaborative Enterprise in Peer-to-Peer Computing Environments,” Proc. Eighth ACM Symp. Access Control Models and Technologies (SACMAT '03), pp. 93–99, 2003
33. P.C.K. Hung and K. Karlapalem, “A Secure Workflow Model,” Proc. Australasian Information Security Workshop Conf. (ACSW Frontiers '03), pp. 33–41, 2003
34. J. Kong and X. Hong, “ANODR: Anonymous on Demand Routing with Untraceable Routes for Mobile Ad-Hoc Networks,” Proc. MobiHoc '03, pp. 291–302, 2003
35. L. Korba, R. Song, and G. Yee, “Anonymous Communications for Mobile Agents,” Proc. Fourth Int'l Workshop Mobile Agents for Telecomm. Applications (MATA '02), pp. 171–181, 2002
36. D. Langworthy et al., “WS-AtomicTransaction,” http://download.boulder.ibm.com/ibmdl/pub/software/dw/specs/ws-tx/WS-AtomicTransaction.pdf, 2005
37. L.F. Cabrera et al., “WS-BusinessActivity,” http://download.boulder.ibm.com/ibmdl/pub/software/dw/library/ws-busact200411.pdf, 2005
38. G. Alonso, F. Casati, H. Kuno, and V. Machiraju, Web Services: Concepts, Architectures, and Applications. Springer Verlag, 2003
39. M.P. Papazoglou, “Web Services and Business Transactions,” World Wide Web, vol. 6, no. 1, pp. 49–91, 2003
40. C.K. Fung, P.C.K. Hung, and D.H. Folger, “Achieving Survivability in Business Process Execution Language for Web Services (BPEL) with Exception-Flows,” Proc. IEEE Int'l Conf. e-Technology, e-Commerce, and e-Service (EEE '05), pp. 68–74, 2005
41. G. Chafle, S. Chandra, P. Kankar, and V. Mann, “Handling Faults in Decentralized Orchestration of Composite Web Services,” Lecture Notes in Computer Science, vol. 3826, 2005
42. M.G. Nanda and N. Karnik, “Synchronization Analysis for Decentralizing Composite Web Services,” Proc. ACM Symp. Applied Computing (SAC '03), pp. 407–414, 2003
43. T. Mikalsen, S. Tai, and I. Rouvellou, “Transactional Attitudes: Reliable Composition of Autonomous Web Services,” Proc. Workshop Dependable Middleware-Based Systems, 2002