Formal Verification of Business Workflows and Role Based Access Control Systems
Formal Verification of Business Workflows and Role Based Access Control Systems
复制标题
业务工作流程和基于角色的访问控制系统的形式验证
DOI：
--
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
V. Lotz
中科院分区：
文献类型：
--
作者：
A. Dury;S. Boroday;A. Petrenko;V. Lotz
提出了一种将基于角色的访问控制系统(RBAC)与业务工作流相结合的建模方法。该模型允许对各种安全属性进行模型检查。提出了几种限制模型检验过程中可能发生的状态爆炸的技术，并使用模型检查器SPIN进行了实验评估。这些技术允许为中等规模公司的合理数量的用户验证业务工作流和相关的RBAC。
An approach for combined modeling of role-based access control systems (RBAC) together with business workflows is presented. The model allows to model check various security properties. Several techniques to confine the state explosion, which may occur during model checking are presented and experimentally evaluated using the model checker Spin. The techniques allow the verification of the business workflow and associated RBAC for a reasonable number of users of a medium sized company.