Modeling and Realizing Security-Critical Inter-Organizational Workflows

13th International Conference on Intelligent and Adaptive Systems and Software Engineering 2004, IASSE 2004

Volumn , Issue , 2004, Pages 139-144

  Breu, Ruth ^a   Hafner, Michael ^a   Weber, Barbara ^a  

^a UNIVERSITY OF INNSBRUCK   (Austria)

Author keywords

inter organizational workflows; object oriented modelling; security; UML

Indexed keywords

ADAPTIVE SYSTEMS; OBJECT ORIENTED PROGRAMMING; WEB SERVICES;

INTER-ORGANIZATIONAL WORKFLOW; OBJECT ORIENTED MODELLING; ORTHOGONAL VIEWS; PROPERTY; REFERENCE ARCHITECTURE; SECURITY; SECURITY REQUIREMENTS; SECURITY-CRITICAL; UML; WORKFLOW VIEWS;

CRYPTOGRAPHY;

EID: 78649297164     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (36)

1. http://www.idc.com
2. http://www.w3.org.
3. B. Siddiqui: Web Services Security for Java, O'Reilly, 2003; http://webservices.xml.com/
4. B. Siddiqui: Web Services Security, Part 1-4, O'Reilly. 2003: http://webservices.xml.com/
5. F. Leyman, D. Roller.: Production Workflow: Concepts and Techniques. Prentice-Hall 2000.
6. http://www.alphaworks.ibm.com/tech/bpws4i
7. T. Andrews, F. Curbera, II. Dholakia, et al: Specification: Business Process Execution Language for Web Services Version 1.1, May 2003 http://www.ibm.com/developerworks/librarv/ws-bpel
8. F. Curbera, Y, Goland, J. Klein, F. Leymann, D. Roller, S. Thatte, S. Weerawarana: Business Process Execution Language for Web Services (BPEL4WS1.0), August 2002, Published on the World Wide Web by BEA Corp., IBM Corp. and Microsoft Corp. http://www.ibm.com/developerworks/librarv/ws-bpel
9. D. Carlson. Modeling XML Vocabularies with UML. http://www.xml.com/pub/a/2001/08/22/uml.html
10. R. Breu, G. Popp: Actor-Centric Modeling of User Rights. Accepted for ETAPS 2004.
11. R. Breu, M. Alam. Modeling Permissions in a [U\X]ML World, in preparation.
12. S. Godik, T. Moses: extensible Access Control Markup Language (XACML) Version 1.0 3 OASIS Standard, 18 February 2003 http://www.oasisopen.org/committees/xacml/repositorv
13. Ass Arkin: Business Process Modeling Language - BPML1.0 Last Call Working Draft, 2002 http://www.bpmi.org/bpml-spec.esp
14. E. Christensen, F. Curbera, G. Meredith, S. Weerawarana: Web Services Description Language (WSDL) 1.1, March 2001 http://www.w3.org/TR/wsdl
15. F. Cabrera, G. Copeland, B. Cox, T. Freund, J. Klein, T. Storey, S. Thatte: Specification: Web Services Transaction (WS-Transaction), 9 August 2002, http://www-106.ibm.com/developerworks/webservices/librarv/wstranspec/
16. K. Mantell: From UML to BPEL, Model Driven Architecture in a Web services world. IBM 2003. http://www-106.ibm.com/developerworks/webservices/librarv/wsum12bpel/#author1
17. D. Box, F. Curbera, M. Hondo: Specification: Web Services Policy Framework (WSPolicy), 28 May 2003, http://www.ibm.com/developerworks/library/ws-policy
18. E. Bertino, S. Castano, E. Ferrari: Securing XML Documents with Author X. In: IEEE Internet Computing, vol. 5, no. 3, May/June 2001.
19. D. W. Chadwick: An X.509 Role-based Privilege Management Infrastructure. Businessbriefing Global Infosecuritiy, Salford 2002.
20. M. Thompson, A. Essiari, S. Mudumbai.: Certificatebased Authorization Policy in a PKI Environment. Submitted to a special issue of ACM Transactions on Infomation and System Security. Nov. 2003.
21. G. Alonso, C. Mohan: Workflow Management: The Next Generation of Distributed Processing Tools, Chapter 2, In: Advanced Transaction Models and Architectures, S. Jajodia, L. Kerschberg (Eds.), Kluwer Academic Publishers, 1997.
22. S. Ceri, P. Grefen, G. Sanchez. WIDE-A Distributed Architecture for Workflow Management. Proceedings of the 7th International Workshop on Research Issues in Data Engineering, Birmingham, UK, April 1997.
23. W. M. P. van der Aalst and M. Weske. The P2P appraoch to Interorganizational Workflows. In K. R. Dittrich, A. Geppert, and M. C. Norrie, editors, Proceedings of the 13th International Conference on Advanced Information Systems Engineering (CAiSE'01), volume 2068 of Lecture Notes in Computer Science, pages 140-156. Springer-Verlag, Berlin, 2001.
24. W. M. P. van der Aalst: Process-oriented Architectures for Electronic Commerce and Interorganizational Workflow. In: Information Systems 24 (1999) 8, pp. 639-671.
25. W. M. P. van der Aalst: Loosely Coupled Interorganizational Workflows: Modeling and Analyzing Workflows Crossing Organizational Boundaries. In: Information and Management 37 (2000) 2, pp. 67-75.
26. Z. Luo, A. Shet, K. Kochut, J. Miller: Exception Handling in Workflow Systems. In: Applied Intelligence 13 (2000) 2, pp. 125-147.
27. P. Grefen, K. Aberer, Y. Hoffner, H. Ludwig: CrossFlow: cross-organizational workflow management in dynamic virtual enterprises. In: International Journal of Computer Systems Science & Engineering 15 (2000) 5, pp. 277-290.
28. F. Casati and M. Shan. Event-based Interaction Management for Composite E-Services in eFlow. Information Systems Frontiers 4(2), 2002.
29. thEuropean Symposium on Research in Computer Security, 1996.
30. E. Gudes, M. Olivier, R. van de Riet. Modelling, Specifying and Implementing Workflow Security in Cyberspace. In: Journal of Computer Security, 1999.
31. W. K. Huang, V. Atluri. SecureFlow: A secure Webenabled Workflow Management System. ACM Workshop on Role-Based Access Control, 1999.
32. J. Wainer, P. Barthelmess and A. Kumar: W-RBAC-A Workflow Security Model Incorporating Controlled Overriding of Constraints In International Journal of Cooperative Information Systems. Vol. 12, No 4 (2003) 455-485.
33. D. Basin, J. Doser, T. Lodderstedt. Model Driven Security for Process-Oriented Systems. In 8th ACM Symposium on Access Control Models and Technologies. ACM Press, 2003.
34. U. Lang. Access Policies for Middleware. PhD Thesis, University of Cambridge, 2003.
35. T. Lodderstedt, D. Basin, J. Doser. Secureuml: A uml-based modeling language for model-driven security. In: J.-M. Jezequel, H. Hussmann, S. Cook (eds.): UML 2002. Lecture Notes in Computer Science, vol. 2460, Springer, 2002.
36. A. G. Kleppe, J. Warmer: The Object Constraint Language - Precise Modeling with UML. Addison Wesley Longman, Inc., 1999.