• DocumentCode
    3322721
  • Title

    Verifying workflow processes against organization security policies

  • Author

    Ribeiro, Carlos ; Guedes, Paulo

  • Author_Institution
    IST/INESC, Portugal
  • fYear
    1999
  • fDate
    1999
  • Firstpage
    190
  • Lastpage
    191
  • Abstract
    Workflow applications for large complex organizations often need to cross several security domains, each with different management and specific security requirements. The resultant cross-dependency between the workflow specification and the security policy of each domain can be hard to manage without specific tools. This work presents a static analyzer that automatically verifies the consistency between workflow specifications written in WPDL (Workflow Process Definition Language) and organization security policies, written in a security language specially designed to express simultaneously several security policies
  • Keywords
    business data processing; formal verification; program diagnostics; security of data; workflow management software; WPDL; Workflow Process Definition Language; large complex organizations; management; organization security policies; static analyzer; workflow process verification; workflow specifications; Algebra; Authorization; Electrical capacitance tomography; Engines; Inspection; Operating systems; Process design; Security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Enabling Technologies: Infrastructure for Collaborative Enterprises, 1999. (WET ICE '99) Proceedings. IEEE 8th International Workshops on
  • Conference_Location
    Stanford, CA
  • ISSN
    1080-1383
  • Print_ISBN
    0-7695-0365-9
  • Type

    conf

  • DOI
    10.1109/ENABL.1999.805198
  • Filename
    805198