NDLI: Formal Analysis of Access Control Policies for Pattern-Based Business Processes

Content Provider	IEEE Xplore Digital Library
Author	Karimi, V.R.
Copyright Year	2009
Abstract	We propose formal analysis of access control policies associated with business processes. Formal analysis of such policies enables us to investigate certain properties of interest and determine whether they hold. Discovering whether these policies create the intended effects, especially when the number of policies is increased and often composed, can become complex. In addition, we believe that access control policies must be specified in such a way that their integration into business processes is straightforward. Prior research has focused on formal verification of either access control policies or business processes but not viewed the two as an integrated whole. We show an approach in which access control policies and business processes are described using the same foundational building blocks, consequently, integration of access control policies and business processes is significantly less complex. Furthermore, access control policies can now be described by business patterns, and this description may result in discovery of access control patterns that can be used in the future. Finally, our approach through the use of business patterns is capable of modeling access control policies in the same way an access control model does. In addition, these policies can be specified and extended using rules, and in this respect, are akin to a policy language.
Starting Page	239
Ending Page	242
File Size	452834
Page Count	4
File Format	PDF
ISBN	9781424453443
DOI	10.1109/CONGRESS.2009.18
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-08-25
Publisher Place	Canada
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Logic programming Resource--Event--Agent (REA) Formal analysis Engines Guidelines Access control model Authorization Business process Privacy Access control policy Permission Business pattern Pattern analysis Computer security Formal verification
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Verification of Access Control Policies for REA Business Processes

Implementing ACL-Based Policies in XACML

Model Checking of Security-sensitive Business Processes?

Towards formal verification of role-based access control policies (2008)

1Towards Formal Verification of Role-Based Access Control Policies

Towards Proactive Policies Supporting Event-Based Task Delegation

Towards Formal Verification of Role-Based Access Control Policies

Avoiding Policy-based Deadlocks in Business Processes

A modal logic for authorization specification and reasoning

Formal Analysis of Access Control Policies for Pattern-Based Business Processes

Similar Documents

Verification of Access Control Policies for REA Business Processes

Implementing ACL-Based Policies in XACML

Model Checking of Security-sensitive Business Processes?

Towards formal verification of role-based access control policies (2008)

1Towards Formal Verification of Role-Based Access Control Policies

Towards Proactive Policies Supporting Event-Based Task Delegation

Towards Formal Verification of Role-Based Access Control Policies

Avoiding Policy-based Deadlocks in Business Processes

A modal logic for authorization specification and reasoning

Formal Analysis of Access Control Policies for Pattern-Based Business Processes