High Assurance BPEL Process Models

Robinson, Mark; Shen, Hui; Niu, Jianwei

doi:10.1007/978-0-387-87658-0_11

Cited by 1 publication

(2 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…XACML (currently version 3.0) has become the de facto standard for specifying access control policies widely used in Web servers. Since 2004, OASIS has defined a XACML profile for RBAC in order to link RBAC practical solutions in web services environments 2 . Management of privileges in a distributed environment, based designs on RBAC solutions, gives greater control of privileges, decreasing the complexity involved in this process.…”

Section: B Rbac and Xacmlmentioning

confidence: 99%

“…According to this paradigm, these collaborations are reified as business processes, designed by business experts according to their concerns. These processes are supported by existing norm such as the Business Process Execution Language (BPEL, [2]). However, the SOA paradigm does not support cross-cuttings concerns (e.g., security, persistence) per se; business experts design tangled processes, tangling both functional and cross-cuttings concerns together at the process level.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Introducing Security Access Control Policies into Legacy Business Processes

Giraldo

Blay–Fornarino

Mosser

2011

2011 IEEE 15th International Enterprise Distributed Object Computing Conference Workshops

View full text Add to dashboard Cite

Abstract-Applying separation of concerns approaches into business process context generally results in several initiatives oriented to automatic generation of aspect code, generation of specific code according to the kind of concern (code for mapping roles and permissions derived from RBAC model for example), or proposition of new mechanisms as dedicated aspectual languages. Most of these initiatives only consider functional behaviours of business process, omitting special behaviours derived from quality attributes such as security, which can be modelled as concerns that must be supported in the business process. In this paper we propose the integration of cross-cuttings standardized control access policies (based on RBAC model and Oasis XACML) into legacy business processes, using a separation of concerns approach.

show abstract

Section: B Rbac and Xacmlmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%