Publications

Workflow and Access Control Reloaded: a Declarative Specification Framework for the Automated Analysis of Web Services  (2011)

Authors:
BARLETTA Michele; CALVI Alberto; RANISE Silvio; VIGANO' Luca; ZANETTI Luca
Title:
Workflow and Access Control Reloaded: a Declarative Specification Framework for the Automated Analysis of Web Services
Year:
2011
Type of item:
Articolo in Rivista
Tipologia ANVUR:
Articolo su rivista
Nations of authors:
ITALIA
Language:
Inglese
Format:
A Stampa
Referee:
Name of journal:
SCALABLE COMPUTING. PRACTICE AND EXPERIENCE
ISSN of journal:
1895-1767
N° Volume:
12
Number or Folder:
1
Page numbers:
1-20
Keyword:
Computer security, formal methods, web services
Short description of contents:
Web services supporting business and administrative transactions between several parties over the Internet are more and more widespread. Their development involves several security issues ranging from authentication to the management of the access to shared resources according to given business and legal models. The capability of validating designs against fast evolving requirements is of paramount importance for the adaptation of business and administrative models to changing regulations and rapidly evolving market needs. We present formal specification and analysis techniques that allow us to validate the designs of security-sensitive web services specified in the Business Process Execution Language and extensions of the Role-Based Access Control model. We also present a prototype tool, called WSSMT, mechanizing our approach and describe our experience in using it on two industrial case studies, on in the e-business and one in the e-government area.
Product ID:
60926
Handle IRIS:
11562/353883
Deposited On:
November 17, 2012
Last Modified:
November 2, 2016
Bibliographic citation:
BARLETTA Michele; CALVI Alberto; RANISE Silvio; VIGANO' Luca; ZANETTI Luca, Workflow and Access Control Reloaded: a Declarative Specification Framework for the Automated Analysis of Web Services «SCALABLE COMPUTING. PRACTICE AND EXPERIENCE» , vol. 12 , n. 12011pp. 1-20

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo IRIS

Related projects
Title Department Managers
SPaCIoS: Secure Provision and Consumption in the Internet of Services Department Informatica Luca Vigano'
<<back

Activities

Research facilities