{"id":"https://openalex.org/W1537794894","doi":"https://doi.org/10.3233/jcs-1997-5403","title":"Enforcing mandatory and discretionary security in workflow management systems*","display_name":"Enforcing mandatory and discretionary security in workflow management systems*","publication_year":1997,"publication_date":"1997-10-01","ids":{"openalex":"https://openalex.org/W1537794894","doi":"https://doi.org/10.3233/jcs-1997-5403","mag":"1537794894"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-1997-5403","doi":"https://doi.org/10.3233/jcs-1997-5403","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-1997-5403","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-b","cwts-core","dongbi-c","jufo-2","norway-1","poland-40","russia-white-list-3"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084845728","display_name":"Vijayalakshmi Atluri","orcid":"https://orcid.org/0000-0003-2068-780X","observed_orcids":["https://orcid.org/0000-0003-2068-780X"]},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vijayalakshmi Atluri","raw_affiliation_strings":["Center for Information Management, Integration, and Connectivity (CIMIC) and MS/CIS Department, Rutgers University, 180 University Avenue, Newark, NJ 07102, USA, E-mail: atluri@andromeda.rutgers.edu, waynexh@andromeda.rutgers.edu"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Information Management, Integration, and Connectivity (CIMIC) and MS/CIS Department, Rutgers University, 180 University Avenue, Newark, NJ 07102, USA, E-mail: atluri@andromeda.rutgers.edu, waynexh@andromeda.rutgers.edu","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046321692","display_name":"Wei-Kuang Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei-Kuang Huang","raw_affiliation_strings":["Center for Information Management, Integration, and Connectivity (CIMIC) and MS/CIS Department, Rutgers University, 180 University Avenue, Newark, NJ 07102, USA, E-mail: atluri@andromeda.rutgers.edu, waynexh@andromeda.rutgers.edu"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Information Management, Integration, and Connectivity (CIMIC) and MS/CIS Department, Rutgers University, 180 University Avenue, Newark, NJ 07102, USA, E-mail: atluri@andromeda.rutgers.edu, waynexh@andromeda.rutgers.edu","institution_ids":["https://openalex.org/I102322142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102322142"],"apc_list":{"value":4150,"currency":"USD","value_usd":4150},"apc_paid":null,"fwci":0.9843,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.78039054,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"5","issue":"4","first_page":"303","last_page":"339"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.49630001187324524,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.49630001187324524,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.4839000105857849,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11125","display_name":"Petri Nets in System Modeling","score":0.00800000037997961,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workflow-management-systems","display_name":"workflow management systems","score":0.9959999918937683},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"mandatory access control","score":0.8240000009536743},{"id":"https://openalex.org/keywords/discretionary-access-control","display_name":"discretionary access control","score":0.9990000128746033},{"id":"https://openalex.org/keywords/multilevel-security","display_name":"multilevel security","score":0.9629999995231628},{"id":"https://openalex.org/keywords/task-dependencies","display_name":"task dependencies","score":0.8870000243186951}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8572889566421509},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.8188530802726746},{"id":"https://openalex.org/C38677869","wikidata":"https://www.wikidata.org/wiki/Q724168","display_name":"Petri net","level":2,"score":0.7756861448287964},{"id":"https://openalex.org/C140824633","wikidata":"https://www.wikidata.org/wiki/Q2808660","display_name":"Workflow management system","level":3,"score":0.7525336742401123},{"id":"https://openalex.org/C19612761","wikidata":"https://www.wikidata.org/wiki/Q8034836","display_name":"Workflow technology","level":3,"score":0.5923163890838623},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5626203417778015},{"id":"https://openalex.org/C188220564","wikidata":"https://www.wikidata.org/wiki/Q3325097","display_name":"Workflow engine","level":3,"score":0.5340783596038818},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5251469612121582},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.49464985728263855},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.44905781745910645},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.42738038301467896},{"id":"https://openalex.org/C130536060","wikidata":"https://www.wikidata.org/wiki/Q592375","display_name":"XPDL","level":4,"score":0.41533946990966797},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3762047588825226},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36349576711654663},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.11849024891853333},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3233/jcs-1997-5403","doi":"https://doi.org/10.3233/jcs-1997-5403","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-1997-5403","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-b","cwts-core","dongbi-c","jufo-2","norway-1","poland-40","russia-white-list-3"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.52.9787","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.52.9787","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://cimic.rutgers.edu/~waynexh/jcs-new.ps","raw_type":"text"},{"id":"pmh:oai:alma.01RUT_INST:11663590130004646","doi":null,"is_oa":false,"landing_page_url":"https://scholarship.libraries.rutgers.edu/esploro/outputs/journalArticle/Enforcing-mandatory-and-discretionary-security-in/991031654764404646","pdf_url":null,"source":{"id":"https://openalex.org/S4306401388","display_name":"Rutgers University Community Repository (Rutgers University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I102322142","host_organization_name":"Rutgers, The State University of New Jersey","host_organization_lineage":["https://openalex.org/I102322142"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2492556766","https://openalex.org/W1668806576","https://openalex.org/W2382203193","https://openalex.org/W1518368288","https://openalex.org/W1492051944","https://openalex.org/W1744416449","https://openalex.org/W1607462161","https://openalex.org/W2381687993","https://openalex.org/W7097437249","https://openalex.org/W1639227833"],"abstract_inverted_index":{"Workflow":[0],"management":[1,19],"systems":[2],"(WFMS)":[3],"support":[4,27],"the":[5,36,86,108,119,135,169,192,225,228,232,236,260,268,326],"modeling":[6,68,107,293],"and":[7,48,113,133,166,178,263,318],"coordinated":[8],"execution":[9,226],"of":[10,38,106,110,121,163,194,209,227,296,300,307,320,331],"processes":[11],"within":[12],"an":[13,242,315],"organization.":[14],"As":[15],"advances":[16],"in":[17,138,145,212,314],"workflow":[18,39,130,140,202,312],"take":[20],"place,":[21],"they":[22],"are":[23],"also":[24,273],"required":[25,221],"to":[26,35,118,147,159,191,220,255,264],"security.":[28,115],"This":[29,88,271],"paper":[30,89,125,199,272],"makes":[31],"two":[32],"major":[33],"contributions":[34],"area":[37],"management.":[40],"First,":[41],"it":[42,57],"sh":[43],"ows":[44],"how":[45,154,168,275],"both":[46,111],"mandatory":[47,122],"discretionary":[49,114,195],"security":[50,150,173],"can":[51,156,174,278,322],"be":[52,143,157,175,256,265,279,323],"incorporated":[53],"into":[54],"WFMS.":[55],"Second,":[56],"provides":[58],"a":[59,71,77,92,127,139,182,201,214,289,311],"formal":[60],"framework,":[61],"based":[62,95],"on":[63],"Petri":[64,93,100,184,286],"nets":[65],"(PNs),":[66],"for":[67,76,84,292],"workflows.":[69,87],"Such":[70],"theoretical":[72],"model":[73,132,204],"is":[74,104,207,246,288],"necessary":[75],"standard":[78],"conceptual":[79],"representation":[80],"as":[81,83,305],"well":[82],"analyzing":[85],"first":[90],"presents":[91,274],"Net":[94],"model,":[96],"called":[97],"color":[98],"timed":[99],"net":[101,185,287],"(CTPN),":[102],"which":[103],"capable":[105,208],"attributes":[109],"multilevel":[112,128,149],"With":[116,189],"respect":[117,190],"issue":[120,193],"security,":[123],"this":[124,198,240,276],"proposes":[126,200],"secure":[129,183],"transaction":[131],"identifies":[134],"task":[136,164,170,250,261,269],"dependencies":[137,165,171],"that":[141,206,216,251,285],"cannot":[142],"enforced":[144],"order":[146],"meet":[148],"constraints.":[151],"It":[152],"shows":[153,167],"CTPN":[155],"used":[158],"represent":[160],"various":[161],"types":[162],"violating":[172],"automatically":[176],"detected":[177],"prevented":[179],"by":[180],"building":[181],"(SPN)":[186],"from":[187],"CTPN.":[188,282],"access":[196,219],"control,":[197],"authorization":[203,233,243],"(WAM)":[205],"specifying":[210],"authorizations":[211,254],"such":[213,304],"way":[215],"subjects":[217],"gain":[218],"objects":[222],"only":[223,258],"during":[224],"task,":[229],"thus":[230],"synchronizing":[231],"flow":[234],"with":[235,248],"workflow.":[237],"To":[238],"achieve":[239],"synchronization,":[241],"template":[244],"(AT)":[245],"associated":[247],"each":[249],"allows":[252],"appropriate":[253],"granted":[257],"when":[259,267],"starts":[262],"revoked":[266],"finishes.":[270],"synchronization":[277],"implemented":[280],"using":[281,325],"We":[283],"argue":[284],"suitable":[290],"tool":[291],"workflows":[294,308],"because":[295],"its":[297],"rich":[298],"set":[299],"analysis":[301,329],"techniques.":[302],"Properties":[303],"safety":[306,319],"(i.e.,":[309],"whether":[310],"terminates":[313],"acceptable":[316],"state)":[317],"WAM":[321],"tested":[324],"already":[327],"available":[328],"techniques":[330],"PNs.":[332]},"counts_by_year":[{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2}],"updated_date":"2026-09-03T10:48:47.769340","created_date":"2016-06-24T00:00:00"}