Controlling usage in business process workflows through fine-grained security policies

Benjamin Aziz; A. Arenas; F. Martinelli; I. Matteucci; P. Mori

Controlling usage in business process workflows through fine-grained security policies

Benjamin Aziz, A. Arenas, F. Martinelli, I. Matteucci, P. Mori

School of Computing

Research output: Contribution to conference › Other › peer-review

Abstract

We propose a language for expressing fine-grained security policies for controlling orchestrated business processes modelled as a BPEL workflow. Our policies are expressed as a process algebra that permits a BPEL activity, denies it or force-terminates it. The outcome is evaluates with compensation contexts. Finally, we give an example of these policies in a distributed map processing scenario such that the policies constrain service interactions in the workflow according to the security requirements of each entity participating in the workflow.

Original language	English
Pages	100-117
Number of pages	18
Publication status	Published - Sept 2008
Event	5th International Conference on Trust, Privacy and Security in Digital Business - Turin, Italy Duration: 4 Sept 2008 → 5 Sept 2008

Conference

Conference	5th International Conference on Trust, Privacy and Security in Digital Business
Abbreviated title	TrustBus 2008
Country/Territory	Italy
City	Turin
Period	4/09/08 → 5/09/08

Cite this

@conference{82094f86829a477ca7a9dfc2b79c7660,

title = "Controlling usage in business process workflows through fine-grained security policies",

abstract = "We propose a language for expressing fine-grained security policies for controlling orchestrated business processes modelled as a BPEL workflow. Our policies are expressed as a process algebra that permits a BPEL activity, denies it or force-terminates it. The outcome is evaluates with compensation contexts. Finally, we give an example of these policies in a distributed map processing scenario such that the policies constrain service interactions in the workflow according to the security requirements of each entity participating in the workflow.",

author = "Benjamin Aziz and A. Arenas and F. Martinelli and I. Matteucci and P. Mori",

year = "2008",

month = sep,

language = "English",

pages = "100--117",

note = "5th International Conference on Trust, Privacy and Security in Digital Business, TrustBus 2008 ; Conference date: 04-09-2008 Through 05-09-2008",

}

TY - CONF

T1 - Controlling usage in business process workflows through fine-grained security policies

AU - Aziz, Benjamin

AU - Arenas, A.

AU - Martinelli, F.

AU - Matteucci, I.

AU - Mori, P.

PY - 2008/9

Y1 - 2008/9

N2 - We propose a language for expressing fine-grained security policies for controlling orchestrated business processes modelled as a BPEL workflow. Our policies are expressed as a process algebra that permits a BPEL activity, denies it or force-terminates it. The outcome is evaluates with compensation contexts. Finally, we give an example of these policies in a distributed map processing scenario such that the policies constrain service interactions in the workflow according to the security requirements of each entity participating in the workflow.

AB - We propose a language for expressing fine-grained security policies for controlling orchestrated business processes modelled as a BPEL workflow. Our policies are expressed as a process algebra that permits a BPEL activity, denies it or force-terminates it. The outcome is evaluates with compensation contexts. Finally, we give an example of these policies in a distributed map processing scenario such that the policies constrain service interactions in the workflow according to the security requirements of each entity participating in the workflow.

M3 - Other

SP - 100

EP - 117

T2 - 5th International Conference on Trust, Privacy and Security in Digital Business

Y2 - 4 September 2008 through 5 September 2008

ER -

Controlling usage in business process workflows through fine-grained security policies

Abstract

Conference

Fingerprint

Cite this