Model-driven business process security requirement specification |
| |
Authors: | Christian Wolter Michael Menzel Andreas Schaad Philip Miseldine Christoph Meinel |
| |
Affiliation: | 1. SAP Research, CEC Karlsruhe, Vincenz-Priessnitz-Strasse 1, 76131 Karlsruhe, Germany;2. Hasso-Plattner-Institute, Prof.-Dr.-Helmert-Str. 2-3, 14482 Postdam, Germany |
| |
Abstract: | Various types of security goals, such as authentication or confidentiality, can be defined as policies for service-oriented architectures, typically in a manual fashion. Therefore, we foster a model-driven transformation approach from modelled security goals in the context of process models to concrete security implementations. We argue that specific types of security goals may be expressed in a graphical fashion at the business process modelling level which in turn can be transformed into corresponding access control and security policies. In this paper we present security policy and policy constraint models. We further discuss a translation of security annotated business processes into platform specific target languages, such as XACML or AXIS2 security configurations. To demonstrate the suitability of this approach an example transformation is presented based on an annotated process. |
| |
Keywords: | |
本文献已被 ScienceDirect 等数据库收录! |
|