Publications

Authors:

Barletta, Michele; Calvi, Alberto; Ranise, Silvio; Vigano', Luca; Zanetti, Luca

Title:

Workflow and Access Control Reloaded: a Declarative Specification Framework for the Automated Analysis of Web Services

Year:

2011

Type of item:

Articolo in Rivista

Tipologia ANVUR:

Articolo su rivista

Language:

Inglese

Format:

A Stampa

Referee:

Sì

Name of journal:

SCALABLE COMPUTING. PRACTICE AND EXPERIENCE

ISSN of journal:

1895-1767

N° Volume:

12

Number or Folder:

1

Page numbers:

1-20

Keyword:

Computer security; formal methods; web services

Short description of contents:

Web services supporting business and administrative transactions between several parties over the Internet are more and more widespread. Their development involves several security issues ranging from authentication to the management of the access to shared resources according to given business and legal models. The capability of validating designs against fast evolving requirements is of paramount importance for the adaptation of business and administrative models to changing regulations and rapidly evolving market needs. We present formal specification and analysis techniques that allow us to validate the designs of security-sensitive web services specified in the Business Process Execution Language and extensions of the Role-Based Access Control model. We also present a prototype tool, called WSSMT, mechanizing our approach and describe our experience in using it on two industrial case studies, on in the e-business and one in the e-government area.

Product ID:

60926

Handle IRIS:

11562/353883

Deposited On:

November 17, 2012

Last Modified:

October 23, 2022

Bibliographic citation:

Barletta, Michele; Calvi, Alberto; Ranise, Silvio; Vigano', Luca; Zanetti, Luca, Workflow and Access Control Reloaded: a Declarative Specification Framework for the Automated Analysis of Web Services «SCALABLE COMPUTING. PRACTICE AND EXPERIENCE» , vol. 12 , n. 1 , 2011 , pp. 1-20

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo