Trust-Based Secure Workflow Path Construction

Altunay, Mine; Brown, Douglas; Byrd, Gregory T.; Dean, Ralph A.

doi:10.1007/11596141_29

Cited by 11 publications

(8 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This trust type, different from previous CATs, situates in interoperation among participating services inside a workflow. This can be examined this trust in two ways: direct and indirect [9]. The former is defined as inter-individual trust relationship established between services that are immediate neighbors (two adjacent nodes in a workflow path), while the later occurs when they are not immediately connected.…”

Section: F Trust In Workflow Participants(cat 6)mentioning

confidence: 99%

“…The build-time occurs during the workflow formation. Trust relationship must be initially established between a workflow owner and prospective services [9]. The run-time process control interprets and validates [23] trust requirements among selected services.…”

Section: A Trust and Workflow Lifecyclementioning

confidence: 99%

“…Considering trust inside a workflow, the interaction along a workflow path can be basically examined in two aspects: direct and indirect [9]. According to the definition in CAT 6, any interaction occurred between immediate services is considered directed.…”

Section: H Direct (T11) and Indirect (T12) Trust Characteristics In mentioning

confidence: 99%

“…Each of which might possess different security requirements. Unfortunately, many MFMSs manage services without security awareness that may results in 1553-877X/11/$25.00 c 2011 IEEE security violations and reluctance of services to participate [9]. The consequence pushes off the security burden to the service side, as witnessed by each attempting to locally develop their own protections, commonly expressed by security policies.…”

Section: Introductionmentioning

confidence: 98%

“…A service workflow, which requires disparate services to dynamically collaborate and interact on demand, raises important security challenges [9]. There is a need for welldefined and flexible mechanisms that enable relying services to determine trustworthiness of others [22].…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

A Survey of Trust in Workflows and Relevant Contexts

Viriyasitavat

Martin

2011

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

With the fast-growing Internet technology, several service-based interactions are prevalent and appear in several forms such as e-commerce, content provider, Virtual Organizations, Peer-to-Peer, Web Service, Grids, Cloud Computing, and individual interactions. This demands for an effective mechanism to establish trust among participants in a highlevel abstract way, capturing relevant factors ranging on Service Level Agreement, security policies, requirements, regulations, constraints, Quality of Service, reputation, and recommendation. Trust is platform-independent and flexible to be seamlessly integrated into heterogeneous domains and interoperate with different security solutions in distributed environments. Establishing trust in a service workflow leads to the willingness of services to participate. Coordinating service workflows without trust consideration may pose higher risks, possibly results in poor performance, additional vulnerabilities, or failures. Although trust in service workflows and relevant contexts has been studied for a past decade, the standard development is still immature. Nowadays, trust approaches to service workflows comprise a large area of research where one can hardly classify into a comprehensive survey. This survey examines and explores the role of trust in service workflows and their contexts from a wide variety of literatures. Various mechanisms, architecture, techniques, standards, and frameworks are explained along the way with discussions. Working trust definition and classification are newly provided and supported with examples.

show abstract

Section: F Trust In Workflow Participants(cat 6)mentioning

confidence: 99%

Section: A Trust and Workflow Lifecyclementioning

confidence: 99%

Section: H Direct (T11) and Indirect (T12) Trust Characteristics In mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 98%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

A Survey of Trust in Workflows and Relevant Contexts

Viriyasitavat

Martin

2011

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

show abstract

Optimized Workflow Authorization in Service Oriented Architectures

Wimmer

Albutiu

Kemper

2006

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Complex business processes are usually realized by specifying the integration and interaction of smaller modular software components. For example, hitherto monolithic enterprise resource planning systems (ERP) are decomposed into Web services which are then again orchestrated in terms of Web service workflows, bringing about higher levels of flexibility and adaptability. In general, such services constitute autonomous software components with their own dedicated security requirements. In this paper we present our approach for consolidating the access control of (Web service) workflows. The proposed security engineering method allows, first, to determine for whom workflows are executable from a privileges point of view, second, to assess compliance with the principle of least privilege, and, third, helps to reduce policy enforcement costs.

show abstract