Design and Verification of Time-Constrained Workflow with Multi-Level Security - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

Design and Verification of Time-Constrained Workflow with Multi-Level Security

Résumé

When dealing with workflow security requirements, the compliance of information flow with the adopted security policies needs to be analyzed. For this purpose, we adopt in this paper a two-step verification approach. While the first step is concerned by the verification of the soundness of the workflow, the second one is concerned by the control of access rights on information under both time constraints and security requirements (through multilevel security policies such as Bell-LaPadula). We propose a model for such workflow specification based on the Time ECATNet formalism. This latter offers means to incorporate the security and time constraints on information flow into an initial WF-net modeling the control flow of a workflow specification. We then show how to analyze the impact of the introduced security rules on the workflow execution, using the Maude LTL model checker, and show how to relax them to derive a correct workflow specification. Keywords: workflow, data flow, mandatory access control, multilevel security, time constraints, ECATNet. For further information, please visit this web site.
Fichier non déposé

Dates et versions

hal-01125679 , version 1 (06-03-2015)

Identifiants

  • HAL Id : hal-01125679 , version 1

Citer

Kamel Barkaoui, Hanifa Boucheneb, Awatef Hicheur. Design and Verification of Time-Constrained Workflow with Multi-Level Security. DCDS'09, 2nd IFAC Workshop on Dependable Control of Discrete Systems, Bari, Italy, Jan 2009, X, France. pp.25-32. ⟨hal-01125679⟩

Collections

CNAM CEDRIC-CNAM
26 Consultations
0 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More