A Security Framework for Scientific Workflow Provenance Access Control Policies
A Security Framework for Scientific Workflow Provenance Access Control Policies
复制标题
DOI：
10.1109/tsc.2019.2921586
复制
发表时间：
2022-01-01
影响因子：
8.1
通讯作者：
Ahmed, Ishtiaq
中科院分区：
文献类型：
--
作者：
Bhuyan, Fahima Amin;Lu, Shiyong;Ahmed, Ishtiaq
协作科学工作流的概念是为了满足日益增长的协作数据分析需求而提出的。在协作环境中，访问控制策略对于控制协作方之间的工作流、数据产品和出处信息的共享是必要的。特别是，保护工作流程出处至关重要，因为它往往编码的科学实验的详细协议，并携带各自的利益攸关方的知识产权。此外，由于科学工作流往往发展迅速，相应的工作流出处的访问控制策略也必须发展。保证工作流起源访问控制策略的演化过程中保持一定的属性，以保证相应策略执行的正确性和性能是非常重要的。本文提出了一种基于角色的科学工作流起源访问控制模型，定义了科学工作流起源访问控制策略的三个质量要求--一致性、完整性和简洁性; 3）开发从工作流的规范到它们在保持这样的质量属性的起源中的对应物的映射机制，以及4）对自闭症行为数据分析的科学工作流程进行案例研究，以证明我们提出的分析算法的可行性。
The notion of collaborative scientific workflow is coined to address the increasing need for collaborative data analytics. In collaborative environments, access control policies are necessary for controlling the sharing of workflows, data products, and provenance information among collaborating parties. In particular, the protection of workflow provenance is critical because it often encodes the detailed protocol of a scientific experiment and carries the intellectual property of the respective stakeholders. In addition, since scientific workflows often evolve quickly, the corresponding access control policies for workflow provenance have to evolve as well. It is important to ensure that the evolution of workflow provenance access control policies maintain certain properties, in order to guarantee the correctness and performance of the corresponding policy enforcement. In this paper, we 1) propose a role-based access control model for scientific workflow provenance; 2) define three quality requirements for scientific workflow provenance access control policies - consistency, completeness, and conciseness; 3) develop a mechanism mapping from specifications of workflows to their counterparts in a provenance that preserves such quality properties, and 4) conduct a case study on a scientific workflow for autism behavioral data analysis that demonstrates the feasibility of our proposed analysis algorithms.