Modeling and analyzing separation of duties in workflow environments

IFIP Advances in Information and Communication Technology

Volumn 65, Issue , 2002, Pages 199-212

  Knorr, Konstantin ^a   Stormer, Henrik ^a  

^a UNIVERSITY OF ZURICH   (Switzerland)

Author keywords

Fraud control; Separation of duties; Workflow

Indexed keywords

CRIME; SECURITY OF DATA;

GLOBAL NETWORKS; GRAPHICAL MODEL; SECURITY OFFICERS; SECURITY POLICY; SEPARATION OF DUTY; WORK-FLOW SYSTEMS; WORKFLOW; WORKFLOW SPECIFICATION;

SEPARATION;

EID: 84872033321     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (24)

1. Gail-Joon Ahn and Ravi Sandhu. The RSL99 Language for Role-based Separation of Duty Constraints. In Proceedings of the Fourth ACM Workshop on Role-Based Access Control, Fairfax, VA, October 28-29 1999.
2. Elisa Bertino, Elena Ferrari, and Vijay Atluri. The Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information and System Security, 2(1):65-104, Feb. 1999.
3. Christoph J. Bussler. Policy Resolution in Workflow Management Systems. Digital Technical Journal, 6(4), 1995.
4. Andrzej Cichocki, Abdelsalam Helal, Marek Rusinkiewicz, and Darrell Woelk. Workflow and Process Automation - Concepts and Technology. Kluwer Academic, 1998.
5. David R. Clark and David R. Wilson. A Comparison of Commercial and Military Computer Security Policies. In Proceedings of the 1987 IEEE Symposium Security and Privacy, pages 184-l94, Oakland, CA, 1987.
6. Computer Security Institute. Issues and Trends - CSI/FBI Computer Crime and Security Survey. http://www.gocsi.com/summary.html, 1999.
7. Dimitrios Georgakopoulos, Mark Hornick, and Amith Sheth. An Overview of Workflow Management: From Process Modeling to Workflow Automation Infrastructure. Distributed and Parallel Databases, 3:119-153, 1995.
8. Virgil D. Gligor, Serban I. Gavilla, and David Ferraiolo. On the Formal Definition of Separation-of-Duty Policies and their Composition. In Proceedings of the 1998 IEEE Symposium on Security and Privacy, Oakland, CA, 1998.
9. Wei-Kuang Huang and Vijayalakshmi Atluri. SecureFlow: A Secure Web-enabled Workflow Management System. In Proceedings of the Fourth ACM Workshop on Role-Based Access Control, pages 83-94, Fairfax, VA, October 28-29 1999.
10. Kurt Jensen. Coloured Petri Nets - Basic Concepts, Analysis Methods and Practical Use, Volume 1. EATCS Monographs on Theoretical Computer Science. Springer, 1992.
11. Konstantin Knorr. WWW Workflows based on Petri Nets. In Proceedings of the Ninth International Conference on Information Systems Development, Kristiansand, Norway, August 2000.
12. Konstantin Knorr and Harald Weidner. Analyzing Separation of Duties in Petri Net Workflows. In Proceedings of the First International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security, St. Petersburg, May 21-23 2001.
13. Peter Langner, Christoph Schneider, and Joachim Wehler. Prozessmod-ellierung mit ereignisgesteuerten Prozessketten (EPKs) und Petri-Netzen. Wirtschaftsinformatik, 39(5):479-489, 1997.
14. L. G. Lawrence. The Role of Roles. Computers & Security, (12): 15-21, 1993.
15. F. Leymann and W. Altenhuber. Managing Business Processes as an Information Resource. IBM Systems Journal, 33(2):326-348, 1994.
16. Andreas Oberweis. Modellierung und Ausführung von Workflows mit Petri-Netzen. Teubner-Reihe Wirtschaftsinformatik. B.G. Teubner, 1996.
17. 5th ACM Workshop on Role-Based Access Control, Berlin, July 2000.
18. Wolfgang Reisig. Petri Nets-An Introduction. EATCS Monographs on Theoretical Computer Science. Springer, 1985.
19. P. Rittgen. Paving the Road to Business Process Automation. In Martin Bichler and Harald Mahrer, editors, Proceedings of the 8th European Conference on Information Systems (ECIS), volume 1, pages 313-319, Vienna, Jul. 2000.
20. Ravi Sandhu. Separation of Duties in Computerized Information Systems. In Proceedings of the IFIP WG11.3 Workshop on Database Security, Halifax, UK, September 18-21 1990.
21. August-Wilhelm Scheer. Wirtschaftsinformatik. Studienausgabe. Ref-erenzmodelle für industrielle Geschäftsprozesse. Springer, 1998.
22. Henrik Stormer, Konstantin Knorr, and Jan Eloff. A Model for Security in Agent-based Workflows. Informatik, Informatique, 6:24-29, Dec. 2000.
23. Dirk Wodtke and Gerhard Weikum. A Formal Foundation for Distributed Workflow Execution Based on State Charts. In Proceedings of the international Conference on Database Theory, Greece, 1997.
24. Workflow Management Coalition. Interface 1: Process Definition Definition Interchange - Process Model. Workflow Management Coalition, 1998. Document Number TC-1016-P.