Web services supporting business and administrative transactions between several parties over the Internet are more and more widespread. Their development involves several security issues ranging from authentication to the management of the access to shared resources according to given business and legal models. The capability of validating designs against fast evolving requirements is of paramount importance for the adaptation of business and administrative models to changing regulations and rapidly evolving market needs. We present formal specification and analysis techniques that allow us to validate the designs of security-sensitive web services specified in the Business Process Execution Language and extensions of the Role-Based Access Control model. We also present a prototype tool, called WSSMT, mechanizing our approach and describe our experience in using it on two industrial case studies, on in the e-business and one in the e-government area. © 2011 SCPE.

Workflow and access control reloaded: A declarative specification framework for the automated analysis of web services / Barletta, M.; Calvi, A.; Ranise, S.; Vigano, L.; Zanetti, L.. - In: SCALABLE COMPUTING. PRACTICE AND EXPERIENCE. - ISSN 1895-1767. - 12:1(2011), pp. 1-20.

Workflow and access control reloaded: A declarative specification framework for the automated analysis of web services

Ranise S.;
2011-01-01

Abstract

Web services supporting business and administrative transactions between several parties over the Internet are more and more widespread. Their development involves several security issues ranging from authentication to the management of the access to shared resources according to given business and legal models. The capability of validating designs against fast evolving requirements is of paramount importance for the adaptation of business and administrative models to changing regulations and rapidly evolving market needs. We present formal specification and analysis techniques that allow us to validate the designs of security-sensitive web services specified in the Business Process Execution Language and extensions of the Role-Based Access Control model. We also present a prototype tool, called WSSMT, mechanizing our approach and describe our experience in using it on two industrial case studies, on in the e-business and one in the e-government area. © 2011 SCPE.
2011
1
Barletta, M.; Calvi, A.; Ranise, S.; Vigano, L.; Zanetti, L.
Workflow and access control reloaded: A declarative specification framework for the automated analysis of web services / Barletta, M.; Calvi, A.; Ranise, S.; Vigano, L.; Zanetti, L.. - In: SCALABLE COMPUTING. PRACTICE AND EXPERIENCE. - ISSN 1895-1767. - 12:1(2011), pp. 1-20.
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11572/333284
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 7
  • ???jsp.display-item.citation.isi??? ND
social impact