Secure interoperation design in multi-domains environments based on colored Petri nets

Information Sciences

Volumn 221, Issue , 2013, Pages 591-606

  Huang, Hejiao ^a   Kirchner, Hélène ^b  

^a HARBIN INSTITUTE OF TECHNOLOGY   (China)

^b INRIA   (France)

Author keywords

Colored Petri nets; Conflict resolution; Dynamic environment; Secure interoperation

Indexed keywords

ACCESS CONTROL; FLOW GRAPHS; GRAPH THEORY; UBIQUITOUS COMPUTING;

ACCESS CONTROL POLICIES; APPLICATION ENVIRONMENT; COLORED PETRI NETS; CONFLICT DETECTION AND RESOLUTION; CONFLICT RESOLUTION; DYNAMIC ENVIRONMENTS; MULTIPLE ORGANIZATIONS; SECURE INTEROPERATION;

PETRI NETS;

EID: 84875413289     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2012.09.027     Document Type: Article

References (38)

1. F. Ahmad, H. Huang, X. Wang, Analysis of the Petri net model of parallel manufacturing processes with shared resources, Information Sciences 181 (2011) 5249-5266.
2. R.K. Ahuja, T.L. Magnanti, J.B. Orlin, Network Flows: Theory, Algorithms, and Applications, Prentice-Hall, 1993.
3. P. Bonatti, S.D.C. Vimercati, P. Samarati, An algebra for composing access control policies, ACM Transactions on Information and System Security 5 (2002) 1-35.
4. S. Dawson, S. Qian, P. Samarati, Providing security and interoperation of heterogeneous systems, Distributed and Parallel Databases 8 (2000) 119-145.
5. Y. Deng, J.C. Wang, J. Tsai, K. Beznosov, An approach for modeling and analysis of security system architectures, IEEE Transactions on Knowledge and Data Engineering 15 (2003) 1099-1119.
6. P. Festa, P.M. Pardalos, M.G.C. Resende, Feedback set problems, in: D. Du, P.M. Pardalos (Eds.), Handbook of Combinatorial Optimization, Kluwer Academic Publishers, 1999, pp. 209-258.
7. S.I. Gavrila, J.F. Barkley, Formal specification for role based access control user/role and role/role relationship management, in: Proceedings of Third ACM Workshop Role-Based Access Control, 1998, pp. 81-90.
8. L. Gong, X. Qian, Computational issues in secure interoperation, IEEE Transactions on Software Engineering 22 (1996) 43-52.
9. H. Huang, Enhancing the Property-Preserving Petri Net Process Algebra for Component-based System Design (with Application to Designing Multiagent Systems and Manufacturing Systems), Ph.D. Thesis, Department of Computer Science, City University of Hong Kong, 2004.
10. H. Huang, L. Jiao, T.Y. Cheung, W.M. Mak, Property-Preserving Petri Net Process Algebra in Software Engineering, World Scientific Publishing, 2012.
11. H. Huang, H. Kirchner, Formal specification and verification of modular security policy based on colored Petri nets, IEEE Transactions on Dependable and Secure Computing 18 (2011) 852-865.
12. H. Huang, H. Kirchner, S. Liu, W. Wu, Handling inheritance violation for secure interoperation of heterogeneous systems, International Journal of Security and Networks 4 (2009) 223-233.
13. H. Huang, J. Li, W. Zhou, Deadlock-free design of JSP with multi-resource sharing, in: Proceedings of the 2008 International Conference on Computer and Electrical Engineering, 2008, pp. 412-416.
14. K. Jensen, Coloured Petri nets: a high level language for system design and analysis, Lecture Notes in Computer Science 483 (1991) 342-416.
15. K. Jensen, Coloured Petri Nets: Basic Concepts, Analysis Methods and Practical Use, vol. 1, Springer Verlag, 1997.
16. L. Jiao, H. Huang, T.Y. Chueng, Property-preserving composition by place merging, Journal of Circuits, Systems and Computers 14 (2005) 793-812.
17. J. Joshi, E. Bertino, A. Ghafoor, Temporal hierarchies and inheritance semantics for GTRBAC, in: Proceedings of Seventh ACM Symposium on Access Control Models and Technologies, 2002, pp. 74-83.
18. K. Juszczyszyn, Verifying enterprise's mandatory access control policies with coloured Petri nets, in: Proceedings of the 12th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2003, pp. 184-189.
19. K. Knorr, Dynamic access control through Petri net workflows, in: Proceedings of 16the Annual Conference on Computer Security Applications, 2000, pp. 159-167.
20. X.H. Le, S. Lee, Y.K. Lee, H. Lee, M. Khalid, R. Sankar, Activity-oriented access control to ubiquitous hospital information and services, Information Sciences 180 (2010) 2979C2990.
21. Z. Li, N. Wei, Deadlock control of flexible manufacturing systems via invariant-controlled elementary siphons of Petri nets, International Journal of Advanced Manufacturing Technology 33 (2007) 24-35.
22. Z. Li, M. Zhou, Elementary siphons of Petri nets and their application to deadlock prevention in flexible manufacturing systems, IEEE Transactions on System, Man, and Cybernetics 34 (2004) 38-51.
23. J. Liu, Y. Itoh, I. Miyazawa, T. Sekiguchi, A research on Petri net properties using transitive matrix, in: Proceeding IEEE SMC, 1999, pp. 888-893.
24. E. Lupu, M. Sloman, Conflicts in policy-based distributed systems management, IEEE Transactions on Software Engineering 25 (1999) 852-869.
25. W.M. Mak, Verifying Property Preservation for Component-based Software Systems (A Petri-net Based Methodology), Ph.D. Thesis, Department of Computer Science, City University of Hong Kong, 2001.
26. C. Martinez-Garcia, G. Navarro-Arribas, S.N. Foley, V. Torra, J. Borrell, Flexible secure inter-domain interoperability through attribute conversion, Information Sciences 181 (2011) 3491C3507.
27. K.H. Mortensen, Automatic code generation method based on coloured Petri net models applied on an access control system, Lecture Notes in Computer Science 1825 (2000) 367-386.
28. T. Murata, Petri nets: Properties, Analysis, and Applications, Proceedings of IEEE 77 (1985) 541-580.
29. E.A. Oladimeji, L. Chung, Analyzing security interoperability during component integration, in: Proceedings of the 5th IEEE/ACIS International Conference on Computer and Information Science and 1st IEEE/ACIS International Workshop on Component-Based Software Engineering, Software Architecture and Reuse, 2006, pp. 121-129.
30. A. Sasturkar, P. Yang, S.D. Stoller, C. Ramakrishnan, Policy analysis for administrative role-based access control, Theoretical Computer Science 412 (2011) 6208C6234.
31. B. Shafiq, J.B.D. Joshi, E. Bertino, A. Ghafoor, Secure interoperation in a multidomain environment employing RBAC policies, IEEE Transactions on Knowledge and Data Engineering 17 (2005) 1557-1577.
32. B. Shafiq, A. Masood, J. Joshi, A. Ghafoor, A role-based access control policy verification framework for real-time systems, in: Proceedings of the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, 2005, pp. 13-20.
33. Y. Sun, B. Gong, X. Meng, Z. Lin, E. Bertino, Specification and enforcement of flexible security policy for active cooperation, Information Sciences 179 (2009) 2629-2642.
34. A. Walvekar, M. Kelkar, M. Smith, R. Gamble, Determining Conflicts in Interdomain Mappings for Access Control. 〈http://www.seat.utulsa.edu/ papers/Walvekar2006.pdf〉.
35. X. Wang, D. Feng, Z. Xu, H. Hu, Mediator-free secure policy interoperation of exclusively-trusted multiple domains, Lecture Notes in Computer Science 4991 (2008) 248-262.
36. X. Wang, J. Sun, X. Yang, C. Huang, D. Wu, Security violation detection for RBAC based interoperation in distributed environment, IEICE Transactions on Information and Systems E91-D (2008) 1447-1456.
37. Z.L. Zhang, F. Hong, J.G. Liao, Modeling Chinese wall policy using colored Petri nets, in: Proceedings of the 6th IEEE International Conference on Computer and Information Technology, 2006, pp. 162-167.
38. Z.L. Zhang, F. Hong, H.J. Xiao, Verification of strict integrity policy via Petri nets, in: Proceedings of the International Conference on Systems and Networks Communication, 2006, pp. 23-26.