Strong non-leak guarantees for workflow models

Abstract

Despite the correct deployment of access control mechanisms, information leaks can persist and undermine the compliance of workflows to regulations and policies. This paper proposes InDico, a framework for the automated detection of information leaks in workflow models based on static information flow analysis. InDico identifies leaks induced by the structure of the workflow, i.e. its control flow. To this end, it translates workflow models, e.g. in BPEL or BPMN, into Petri nets and conducts the static information flow analysis. Examples demonstrate the applicability and the kinds of information leaks InDico currently detects.

How to Assess Confidentiality Requirements of Corporate Assets?

“…(Accorsi et al, 2011a), (Accorsi et al, 2011b), (Accorsi et al, 2012), (Fenz et al, 2009), , (Lehmann et al, 2013), and (Lohmann et al, 2009)) and confidentiality determination methods implemented as part of different risk assessment methods (e.g., NIST (Barker et al, 2008a), Magerit (Spanish Ministry for Public Administrations, 2006), and Mehari (CLUSIF, 2010)). When dealing with confidentiality requirements in business processes one of the first decisions to make is the level to which each asset should be protected.…”

On the exploitation of process mining for security audits

“…information flow analysis [3,7,17,29]) on basis of process logs are envisioned, recovered models have to fulfill strict requirements. Specifically, mined models have to show the exact log behavior without introducing additional behavior.…”

“…As shown in [7], information on the structure, data flow and data dependencies can be used to effectively detect information flows and, hence, help auditors in searching for violations of isolation properties. On the other hand, there are no approaches combining all three dimensions.…”

Data Flow-Oriented Process Mining to Support Security Audits

“…Based upon InDico [2], the mined workflow specifications can be automatically tested for a multitude of security properties, including MAC-based, non-interference, and enterprise relevant properties, such as Chinese-wall and separation of duties. InDico aims to provide a well-founded, uniform approach and corresponding tool-support for the automated analysis of existing and/or mined workflow specifications for security properties.…”