Title :
Verifying workflow processes against organization security policies
Author :
Ribeiro, Carlos ; Guedes, Paulo
Author_Institution :
IST/INESC, Portugal
Abstract :
Workflow applications for large complex organizations often need to cross several security domains, each with different management and specific security requirements. The resultant cross-dependency between the workflow specification and the security policy of each domain can be hard to manage without specific tools. This work presents a static analyzer that automatically verifies the consistency between workflow specifications written in WPDL (Workflow Process Definition Language) and organization security policies, written in a security language specially designed to express simultaneously several security policies
Keywords :
business data processing; formal verification; program diagnostics; security of data; workflow management software; WPDL; Workflow Process Definition Language; large complex organizations; management; organization security policies; static analyzer; workflow process verification; workflow specifications; Algebra; Authorization; Electrical capacitance tomography; Engines; Inspection; Operating systems; Process design; Security;
Conference_Titel :
Enabling Technologies: Infrastructure for Collaborative Enterprises, 1999. (WET ICE '99) Proceedings. IEEE 8th International Workshops on
Conference_Location :
Stanford, CA
Print_ISBN :
0-7695-0365-9
DOI :
10.1109/ENABL.1999.805198