Security for workflow systems

Handbook of Database Security: Applications and Trends

Volumn , Issue , 2008, Pages 213-230

  Atluri, Vijayalakshmi ^a   Warner, Janice ^a  

^a RUTGERS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 80054978864     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-0-387-48533-1_9     Document Type: Chapter

References (28)

1. Workflow reference model. Technical report, Workflow Management Coalition, 1994.
2. V. Atluri. Security for workflow systems. Information Security Technical Report, 6(2):705-716, 2001.
3. V. Atluri, E. Bertino, E. Ferrari, and P. Mazzoleni. Supporting delegation in secure workflow management systems. IFIP WG 11.3 Conference on Data and Application Security, August 2003.
4. Vijayalakshmi Atluri, Soon Ae Chun, and Pietro Mazzoleni. A chinese wall security model for decentralized workflow systems. In CCS '01: Proceedings of the 8th ACM conference on Computer and Communications Security, 2001.
5. Vijayalakshmi Atluri and Wei-Kuang Huang. An Authorization Model for Workflows. In Proceedings of the Fifth European Symposium on Research in Computer Security, in Lecture Notes in Computer Science, No.1146, Springer-Verlag, September 1996.
6. Vijayalakshmi Atluri andWei-Kuang Huang. A Petri Net Based Safety Analysis of Workflow Authorization Models. Journal of Computer Security, 8(2/3):209-240, 2000.
7. Vijayalakshmi Atluri and Janice Warner. Supporting conditional delegation in secure workflow management systems. In SACMAT, 2005.
8. Elisa Bertino, Piero Andrea Bonatti, and Elena Ferrari. Trbac: A temporal role-based access control model. ACM Transactions on Information and System Security (TISSEC), 4(3):191-203, 2001.
9. Elisa Bertino, Elena Ferrari, and Vijayalakshmi Atluri. A Flexible Model Supporting the Specification and Enforcement of Role-based Authorizations in Workflow Management Systems. In Proc. of the 2nd ACM Workshop on Rolebased Access Control, November 1997.
10. Elisa Bertino, Elena Ferrari, and Vijayalakshmi Atluri. An Approach for the Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information Systems Security, 2(1), February 1999.
11. Elisa Bertino, Elena Ferrari, and Vijayalakshmi Atluri. An Approach for the Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information Systems Security, 2(1), February 1999.
12. R. Botha and J. Eloff. Separation of duties for access control enforcement in workflow environments. IBM Systems Journal, 40(3), 2001.
13. D.F.C. Brewer and M.J. Nash. The chinese wall security policy. In IEEE Symposium on Security and Privacy, 1989.
14. J. Crampton. A reference monitor for workflow systems with constrained task execution. In SACMAT 05, 2005.
15. Dimitrios Georgakopoulos, Mark F. Hornick, and Amit P. Sheth. An overview of workflow management: From process modeling to workflow automation infrastructure. Distributed and Parallel Databases, 3(2):119-153, 1995.
16. V. Gligor, S. Gavrila, and D. Ferraiolo. On the formal definition of separation-ofduty policies and their composition. IEEE Symposium on Research in Security and Privacy, 1998.
17. Michael A. Harrison, Walter L. Ruzzo, and Jeffrey D. Ullman. Protection in operating systems. Commun. ACM, 19(8), 1976.
18. Wei-Kuang Huang and Vijayalakshmi Atluri. Analyzing the Safety of Workflow Authorization Models. In Proc. of the 12th IFIP WG 11.3 Workshop on Database Security, July 1998.
19. Patrick C. K. Hung and Kamalakar Karlapalem2. A secure workflow model. In AISW2003, 2003.
20. Myong H. Kang, Joon S. Park, and Judith N. Froscher. Access control mechanisms for inter-organizational workflows. In SACMAT, 2001.
21. K. Knorr and H. Stormer. Modeling and anlying separation of duties in workflow environments. In IFIP TC11 Sixtgeenth Annual Working Conference on Information Security, 2001.
22. Hristo Koshutanski and Fabio Massacci. Interactive access control for web services. SEC, pages 151-166, 2004.
23. Marek Rusinkiewicz and Amit P. Sheth. Transactional workflow management in distributed systems (invited paper). In Proceedings of the First International Workshop on Advances in Databases and Information Systems, Moscow, Russia, May 23 -26, 1994, pages 18-33, 1994.
24. Ravi S. Sandhu. Transaction Control Expressions for Separation of Duties. In Fourth Computer Security Applications Conference, pages 282-286, 1988.
25. Andreas Schaad, Volkmar Lotz, and Karsten Sohr. A model-checking approach to analysing organisational controls in a loan origination process. In SACMAT '06: Proceedings of the eleventh ACM symposium on Access control models and technologies, 2006.
26. K. Tan, J. Crampton, and C. Gunter. The consistency of task-based authorization constraints in workflow systems. In Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW04, 2004.
27. J. Wainer, P. Barthelmess, and A. Kumar. W-rbac: A workflow security model incorporating controlled overriding of constraints. In International Journal of Cooperative Information Systems, volume 12, 2003.
28. Janice Warner and Vijayalakshmi Atluri. Inter-instance authorization constraints for secure workflow management. In SACMAT, 2006.