DocumentCode
3322721
Title
Verifying workflow processes against organization security policies
Author
Ribeiro, Carlos ; Guedes, Paulo
Author_Institution
IST/INESC, Portugal
fYear
1999
fDate
1999
Firstpage
190
Lastpage
191
Abstract
Workflow applications for large complex organizations often need to cross several security domains, each with different management and specific security requirements. The resultant cross-dependency between the workflow specification and the security policy of each domain can be hard to manage without specific tools. This work presents a static analyzer that automatically verifies the consistency between workflow specifications written in WPDL (Workflow Process Definition Language) and organization security policies, written in a security language specially designed to express simultaneously several security policies
Keywords
business data processing; formal verification; program diagnostics; security of data; workflow management software; WPDL; Workflow Process Definition Language; large complex organizations; management; organization security policies; static analyzer; workflow process verification; workflow specifications; Algebra; Authorization; Electrical capacitance tomography; Engines; Inspection; Operating systems; Process design; Security;
fLanguage
English
Publisher
ieee
Conference_Titel
Enabling Technologies: Infrastructure for Collaborative Enterprises, 1999. (WET ICE '99) Proceedings. IEEE 8th International Workshops on
Conference_Location
Stanford, CA
ISSN
1080-1383
Print_ISBN
0-7695-0365-9
Type
conf
DOI
10.1109/ENABL.1999.805198
Filename
805198
Link To Document