{"id":"https://openalex.org/W1989617554","doi":"https://doi.org/10.1145/2714576.2714633","title":"Automated Synthesis of Run-time Monitors to Enforce Authorization Policies in Business Processes","display_name":"Automated Synthesis of Run-time Monitors to Enforce Authorization Policies in Business Processes","publication_year":2015,"publication_date":"2015-04-03","ids":{"openalex":"https://openalex.org/W1989617554","doi":"https://doi.org/10.1145/2714576.2714633","mag":"1989617554"},"language":"en","primary_location":{"id":"doi:10.1145/2714576.2714633","doi":"https://doi.org/10.1145/2714576.2714633","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2714576.2714633","pdf_url":null,"source":{"id":"https://openalex.org/S4363609011","display_name":"ACM Asia Conference on Computer and Communications Security (ASIA CCS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015835455","display_name":"Clara Bertolissi","orcid":"https://orcid.org/0000-0001-9283-1386","observed_orcids":["https://orcid.org/0000-0001-9283-1386"]},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Clara Bertolissi","raw_affiliation_strings":["Fondazione Bruno Kessler &amp; University of Marseille, Trento, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fondazione Bruno Kessler &amp; University of Marseille, Trento, Italy","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064443338","display_name":"Daniel Ricardo dos Santos","orcid":"https://orcid.org/0000-0002-7747-260X","observed_orcids":["https://orcid.org/0000-0002-7747-260X"]},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]},{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Daniel Ricardo dos Santos","raw_affiliation_strings":["Fondazione Bruno Kessler &amp; SAP Labs France &amp; University of Trento, Trento, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fondazione Bruno Kessler &amp; SAP Labs France &amp; University of Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587","https://openalex.org/I2277624104"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047487115","display_name":"Silvio Ranise","orcid":"https://orcid.org/0000-0001-7269-9285","observed_orcids":["https://orcid.org/0000-0001-7269-9285"]},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Silvio Ranise","raw_affiliation_strings":["Fondazione Bruno Kessler, Trento, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fondazione Bruno Kessler, Trento, Italy","institution_ids":["https://openalex.org/I2277624104"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.5103,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.97802198,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"297","last_page":"308"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9169999957084656,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9169999957084656,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.07100000232458115,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/monitor-synthesis","display_name":"monitor synthesis","score":0.7379999756813049},{"id":"https://openalex.org/keywords/authorization-policies","display_name":"authorization policies","score":0.9850000143051147},{"id":"https://openalex.org/keywords/business-processes","display_name":"business processes","score":0.7889999747276306},{"id":"https://openalex.org/keywords/workflow-management","display_name":"workflow management","score":0.7279999852180481},{"id":"https://openalex.org/keywords/segregation-of-duties","display_name":"segregation of duties","score":0.9819999933242798},{"id":"https://openalex.org/keywords/security-constraints","display_name":"security constraints","score":0.5720000267028809},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.48100000619888306}],"concepts":[{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.8271293640136719},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8184235095977783},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7956756353378296},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.5829976797103882},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5402966737747192},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.49030759930610657},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.47188225388526917},{"id":"https://openalex.org/C100587491","wikidata":"https://www.wikidata.org/wiki/Q1474665","display_name":"Separation of duties","level":4,"score":0.4707542061805725},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.41170138120651245},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39776524901390076},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.30160486698150635},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.20712855458259583},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2714576.2714633","doi":"https://doi.org/10.1145/2714576.2714633","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2714576.2714633","pdf_url":null,"source":{"id":"https://openalex.org/S4363609011","display_name":"ACM Asia Conference on Computer and Communications Security (ASIA CCS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:iris.unitn.it:11572/333106","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/11572/333106","pdf_url":null,"source":{"id":"https://openalex.org/S4377196320","display_name":"Iris (University of Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.47620001435279846}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1516900991","https://openalex.org/W1596664612","https://openalex.org/W1602828133","https://openalex.org/W1964889053","https://openalex.org/W1976484522","https://openalex.org/W1995329661","https://openalex.org/W1996109622","https://openalex.org/W2003334372","https://openalex.org/W2020675906","https://openalex.org/W2023866194","https://openalex.org/W2038953226","https://openalex.org/W2057028717","https://openalex.org/W2060361043","https://openalex.org/W2071235438","https://openalex.org/W2074747980","https://openalex.org/W2075597034","https://openalex.org/W2092874485","https://openalex.org/W2103953153","https://openalex.org/W2105505307","https://openalex.org/W2123910665","https://openalex.org/W2127030216","https://openalex.org/W2138447175","https://openalex.org/W2141387172","https://openalex.org/W2157922724","https://openalex.org/W2167685423","https://openalex.org/W2267233918","https://openalex.org/W2911625174"],"related_works":["https://openalex.org/W1995329661","https://openalex.org/W2023866194","https://openalex.org/W2410278438","https://openalex.org/W2604454538","https://openalex.org/W2586217680","https://openalex.org/W2742476239","https://openalex.org/W2057028717","https://openalex.org/W2099064219","https://openalex.org/W7098710223","https://openalex.org/W2211236020"],"abstract_inverted_index":{"Run-time":[0],"monitors":[1,42],"are":[2],"crucial":[3],"to":[4,14,17,39],"the":[5,46,62,68],"development":[6],"of":[7,29,44,49,64,71,79],"security-aware":[8],"workflow":[9],"management":[10],"systems,":[11],"which":[12],"need":[13],"mediate":[15],"access":[16],"their":[18],"resources":[19],"by":[20],"enforcing":[21,52],"authorization":[22,53],"policies":[23,54],"and":[24,55],"constraints,":[25],"such":[26],"as":[27],"Separation":[28],"Duty.":[30],"In":[31],"this":[32],"paper,":[33],"we":[34],"introduce":[35],"a":[36],"precise":[37],"technique":[38,66],"synthesize":[40],"run-time":[41],"capable":[43],"ensuring":[45],"successful":[47],"termination":[48],"workflows":[50,75],"while":[51],"constraints.":[56],"An":[57],"extensive":[58],"experimental":[59],"evaluation":[60],"shows":[61],"scalability":[63],"our":[65],"on":[67],"important":[69],"class":[70],"hierarchically":[72],"specified":[73],"security-sensitive":[74],"with":[76],"several":[77],"hundreds":[78],"tasks.":[80]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":3}],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2016-06-24T00:00:00"}
