Deploying access control in distributed workflow

Conferences in Research and Practice in Information Technology Series

Volumn 81, Issue , 2008, Pages 9-17

  Ayed, Samiha ^a   Boulahia, Nora Cuppens ^a   Cuppens, Frédéric ^a  

^a ECOLE DES MINES DE NANTES   (France)

Author keywords

Orbac; Petri nets; Security pol icy; WFMS

Indexed keywords

CENTRALIZED MANAGEMENT; CRITICAL ISSUES; DISTRIBUTED WORKFLOW; INTER-ORGANIZATIONAL SYSTEMS; INTER-ORGANIZATIONAL WORKFLOWS; MANAGEMENT SYSTEMS; OPERATIONAL BUSINESS; ORBAC; SECURITY POL-ICY; STATIC ACCESS CONTROL; WFMS; WORK-FLOWS; WORKFLOW SPECIFICATION;

PETRI NETS;

ACCESS CONTROL;

EID: 84871247750     PISSN: 14451336     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Article

References (16)

1. A. Abou El Kalam, R. El Baida, P. Balbiani, S. Benferhat, F. Cuppens, Y. Deswarte, A. Miége, C. Saurel and G. Trouessin (2003), Organiza-tion Based Access Control. IEEE 4th International Workshop on Policies for Distributed Systems and Networks, Lake Come, Italy.
2. N.R. Adam, V. Atluri and W-K. Huang (1998), Mod-eling and Analysis of Workflows Using Petri Nets. Journal of Intelligent Information Systems, Special Issue on Workflow and Process Management, Vol-ume10.
3. V. Atluri, W. Huang (1996), An authorization Model for Workflows. Proceedings of the Fifth European Symposium on Research in Computer Security, Rome, Italy, pages 44-64.
4. E. Bertino, E. Ferrari, V. Alturi (1999), The Specification and Enforcement of Authorization Con-straints in Workflow Management Systems. ACM Transactions on Information and System Security.
5. William E. Boebert, Richard Y. Kain (1996), A fur-ther Note on the Confinment Problem. Proceed-ings of the IEEE 1996 International Carnahan Con-ference on Security Technology. New York: IEEE Computer Society.
6. W. E. Boebert, R. Y. Kain, W. D. Young (1985), The extended Access Matrix Model of Computer Security. ACM Sigsoft Software Engineering Notes, vol 10(4).
7. F. Cuppens and A. Miége (2003), Modelling contexts in the Or-BAC model. 19th Annual Computer Se-curity Applications Conference, Las Vegas.
8. F. Cuppens, N. Cuppens-Boulahia, and A. Miége (2004), Inheritance hierarchies in the Or-BAC model and application in a network environment. Second Foundations of Computer Security Work-shop (FCS'04). Turku, Finlande.
9. F. Cuppens, N. Cuppens-Boulahia, T. Sans and A. Miége (2004), A formal approach to specify and deploy a network security policy. Second Workshop on Formal Aspects in Security and Trust (FAST). Toulouse, France.
10. RenéDavid, Hassane Alla (1992), Du grafcet aux réseaux de Petri, Hermés. Paris, 2nd edition.
11. W. Huang, V. Atluri (1999), SecureFlow: A Secure Web-enabled Workflow Management System. Pro-ceedings of the fourth ACM workshop on Role-based access control, p.83-94, Fairfax, Virginia, United States.
12. P. Hung, Karlapalem (1999), A Secure Workflow Model. AISW (Australian Information Security Workshop.
13. James F. Allen (1993), Towards a General Theory of Action and Time. Proceedings of the Fifteenth An-nual Conference of the Cognitive Science Society.
14. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman (1996), Role-Based Access Control Mod-els. Computer, volume 29-Issue 2.
15. Workflow Management Coalition (1995), The Work-flow Reference Model. WFMC-TC-1003. Workflow Management Coalition (1998), Workflow Security Considerations. White Paper. Document number WFMC-TC-1019, Document Status - Issue 1.0.
16. F. Cuppens, N. Cuppens-Boulahia et T. Sans, (2005), Nomad: A Security Model with Non Atomic Ac-tions and Deadlines. 18th IEEE Computer Se-curity Foundations Workshop (CSFW'05), Aix-en-Provence, France.