Lattice-based risk models for workflows in multi-domain environments

In multi-domain environments, the risk of access policy for workflows is influenced by many factors, and it is difficult to calculate the accurate value of risk combining these factors. But choosing an access policy does not need to know the specific value of risk, only to know the partial order of risks. This paper introduces the concept of risk, proves that the partial order of risks is a lattice, which can ensure implementation of the multi-level security policy. And the risk of access policy can be compared using the lattice effectively. Then, according to it, this paper proposes an algorithm to determine the access policy. It can reinforce the security of workflow systems in multi-domain environments.