Introducing security access control policies into legacy business processes

Proceedings - IEEE International Enterprise Distributed Object Computing Workshop, EDOC

Volumn , Issue , 2011, Pages 42-49

  Giraldo, Fáber D ^a   Blay Fornarino, Mireille ^b   Mosser, Sébastien ^c  

^a UNIVERSIDAD DEL QUINDÍO   (Colombia)

^b UNIVERSITY OF NICE SOPHIA ANTIPOLIS   (France)

^c INRIA   (France)

Author keywords

Business Processes; Security Standards; Separation of Concerns; Service oriented Architecture

Indexed keywords

AUTOMATIC GENERATION; BUSINESS PROCESS; CONTROL ACCESS; NEW MECHANISMS; QUALITY ATTRIBUTES; RBAC MODEL; SECURITY ACCESS; SECURITY STANDARDS; SEPARATION OF CONCERNS; SERVICE ORIENTED;

AUTOMATIC PROGRAMMING; INFORMATION SERVICES; SERVICE ORIENTED ARCHITECTURE (SOA);

ACCESS CONTROL;

EID: 80054826730     PISSN: 15417719     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EDOCW.2011.11     Document Type: Conference Paper

References (23)

1. OASIS, "Reference Model for Service Oriented Architecture 1.0," OASIS, Tech. Rep. wd-soa-rm-cd1, Feb. 2006.
2. M. Robinson, H. Shen, and J. Niu, "High Assurance BPEL Process Models," in High Assurance Services Computing, L.-J. Zhang, R. Paul, and J. Dong, Eds. Springer US, 2009, pp. 219-240.
3. N. Trcka, W. van der Aalst, and N. Sidorova, "Data-Flow Anti-patterns: Discovering Data-Flow Errors in Workflows," in Advanced Information Systems Engineering, ser. Lecture Notes in Computer Science, P. van Eck, J. Gordijn, and R. Wieringa, Eds. Springer Berlin / Heidelberg, 2009, vol. 5565, pp. 425-439, 10.1007/978-3-642-02144-2 34.
4. J. Kienzle, N. Guelfi, and S. Mustafiz, Crisis Management Systems: A Case Study for Aspect-Oriented Modeling, ser. Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 2010, vol. 6210, pp. 1-22.
5. F. Agung, "Concern-Oriented Model-Driven Development Framework," in Software Engineering Conference, Australian, B. Clive, Ed., vol. 0, pp. 527-535.
6. S. Mosser, M. Blay-Fornarino, and M. Riveill, "Web Services Orchestrations Evolution: A Merge Process for Behavioral Evolution," in Software Architecture, ser. Lecture Notes in Computer Science, R. Morrison, D. Balasubramaniam, and K. Falkner, Eds., vol. 5292. Springer Berlin / Heidelberg,2008, pp. 35-49.
7. C. Braga, "A Transformation Contract to Generate Aspects from Access Control Policies," Software and Systems Modeling, pp. 1-15, 2010.
8. H. Wada, J. Suzuki, and K. Oba, "Early Aspects for Non- Functional Properties in Service Oriented Business Processes," pp. 231-238, 2008.
9. C. Courbis and A. Finkelstein, "Weaving Aspects into Web Service Orchestrations," in IEEE International Conference on Web Services, pp. 219 - 226.
10. S. Mosser, "Behavioral Compositions in Service-Oriented Architecture," Ph.D. dissertation, 2010.
11. S. Mosser, M. Blay-Fornarino, and R. France, "Workflow Design Using Fragment Composition - Crisis Management System Design through ADORE," T. Aspect-Oriented Software Development VII, vol. 7, pp. 200-233, 2010.
12. X. Jin, "Applying Model Driven Architecture approach to Model Role Based Access Control System," 2006.
13. A. E. Flores, K. T. Win, and W. Susilo, Secure Exchange of Electronic Health Records . IGI Global, 2011, pp. 1-22.
14. E. Mytilinaiou, V. Koufi, F. Matamateniou, and G. Vassilacopoulos, A Context-Aware Authorization Model for Process-Oriented Personal Health Record Systems . IGI Global, 2011, pp. 46-65 pp.
15. M. Weske, Business Process Management Concepts, Languages, Architectures, springer ed. Springer, 2007.
16. P. Sanchez, A. Moreira, L. Fuentes, J. Araujo, and J. Magno, "Model-Driven Development for Early Aspects," Information and Software Technology, vol. 52, no. 3, p. 24, 2010.
17. S. Buckl, F. Matthes, and C. M. Schweda, "Conceptual Models for Cross-Cutting Aspects in Enterprise Architecture Modeling," Enterprise Distributed Object Computing Conference Workshops, IEEE International, vol. 0, pp. 245-252, 2010.
18. F. Paci, R. Ferrini, Y. Sun, and E. Bertino, "Authorization and User Failure Resiliency for WS-BPEL Business Processes," in Service-Oriented Computing ICSOC 2008, ser. Lecture Notes in Computer Science, A. Bouguettaya, I. Krueger, and T. Margaria, Eds. Springer Berlin / Heidelberg, 2008, vol. 5364, pp. 116-131, 10.1007/978-3-540-89652-4-12. [Online].Available: http://dx.doi.org/10.1007/978-3-540-89652-4-12
19. X. Wang, Y. Zhang, H. Shi, and J. Yang, "BPEL4RBAC: An Authorisation Specification for WS-BPEL," in Web Information Systems Engineering - WISE 2008, ser. Lecture Notes in Computer Science, J. Bailey, D. Maier, K.-D. Schewe, B. Thalheim, and X. Wang, Eds., vol.5175. Springer Berlin / Heidelberg, 2008, pp. 381-395, 10.1007/978-3-540-85481-4-29. [Online]. Available:http://dx.doi. org/10.1007/978-3-540-85481-4-29
20. J. Pavlich-Mariscal, L. Michel, and S. Demurjian, A Formal Enforcement Framework for Role-Based Access Control Using Aspect-Oriented Programming, ser. Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 2005, vol. 3713, pp. 537-552.
21. K. Rao, M. Rao, K. Devi, D. Kumar, and M. Kumar, "Web Services Security Architectures using Role-Based Access Control," (IJCSIT) International Journal of Computer Science and Information Technologies, vol. 1(5), pp. 402-407, 2010.
22. R. Gronmo, "Can Graph Transformation Make Aspect Languages for BPEL Redundant?" Enterprise Distributed Object Computing Conference, IEEE International, vol. 0, pp. 153-162, 2010.
23. A. Charfi, H. Mller, and M. Mezini, Aspect-Oriented Business Process Modeling with AO4BPMN, ser. Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 2010, vol. 6138, pp. 48-61.