Security considerations, such as role-based access control (RBAC) mechanism and separation of duty (SoD) constraints, are important and integral to workflow systems. Since the definition of workflows with these security considerations is a complicated and error-prone process, rigorous verification techniques are desirable for uncovering logical errors and assuring correctness. We propose the use of an equation-based method - the OTS/Cafe OBJ method to model, specify and verify workflows with such security considerations. Specifically, a workflow with the security considerations, is modeled as an OTS, a kind of transition system; the OTS is then specified in CafeOBJ, an algebraic specification language. We verify that the OTS has desired safety and liveness properties by using the CafeOBJ system as an interactive theorem prover. A case study on a sample workflow that deals with travel expense reimbursement is used to demonstrate our method.
|Number of pages||30|
|Journal||International Journal of Software Engineering and Knowledge Engineering|
|Publication status||Published - Feb 1 2007|
All Science Journal Classification (ASJC) codes
- Computer Networks and Communications
- Computer Graphics and Computer-Aided Design
- Artificial Intelligence