کد مقاله کد نشریه سال انتشار مقاله انگلیسی نسخه تمام متن
396699 670552 2015 14 صفحه PDF دانلود رایگان
عنوان انگلیسی مقاله ISI
Information leak detection in business process models: Theory, application, and tool support
ترجمه فارسی عنوان
تشخیص نشت اطلاعات در مدل های فرآیند کسب و کار: نظریه، برنامه، و ابزار پشتیبانی از ؟؟
کلمات کلیدی
امنیت فرآیند کسب و کار، نرم افزار و مهندسی فرآیند، تجزیه و تحلیل خودکار
موضوعات مرتبط
مهندسی و علوم پایه مهندسی کامپیوتر هوش مصنوعی
چکیده انگلیسی

Despite the correct deployment of access control mechanisms, information leaks can persist and threaten the reliability of business process execution. This paper presents an automated and effective approach for the verification of information flow control for business process models. Building on the concept of place-based non-interference and declassification, the core contribution of this paper is the application of Petri net reachability to detect places in which information leaks occur. Such a feature allows for the use of state-of-the-art tool support to model-check business process models and detect leaks. We show that the approach is sound and complete, and present the Anica tool to identify leaks. An extensive evaluation comprising over 550 industrial process models is carried out and shows that information flow analysis of process models can be done in milliseconds. This motivates a tight integration of business process modeling and non-interference checking.

ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Information Systems - Volume 47, January 2015, Pages 244–257
نویسندگان
, , ,