{"id":"https://openalex.org/W2149894469","doi":"https://doi.org/10.1109/crisis.2008.4757466","title":"Verification of Workflow processes under multilevel security considerations","display_name":"Verification of Workflow processes under multilevel security considerations","publication_year":2008,"publication_date":"2008-10-01","ids":{"openalex":"https://openalex.org/W2149894469","doi":"https://doi.org/10.1109/crisis.2008.4757466","mag":"2149894469"},"language":"en","primary_location":{"id":"doi:10.1109/crisis.2008.4757466","is_oa":false,"landing_page_url":"https://doi.org/10.1109/crisis.2008.4757466","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 Third International Conference on Risks and Security of Internet and Systems","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028283340","display_name":"Kamel Barkaoui","orcid":"https://orcid.org/0000-0001-7175-0448"},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]},{"id":"https://openalex.org/I4210145724","display_name":"Centre d'Etudes et De Recherche en Informatique et Communications","ror":"https://ror.org/044j5mm75","country_code":"FR","type":"facility","lineage":["https://openalex.org/I4210145724"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Kamel Barkaoui","raw_affiliation_strings":["CEDRIC-CNAM, Paris, France"],"affiliations":[{"raw_affiliation_string":"CEDRIC-CNAM, Paris, France","institution_ids":["https://openalex.org/I4210145724","https://openalex.org/I124158823"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050443319","display_name":"Rahma Ben Ayed","orcid":null},"institutions":[{"id":"https://openalex.org/I4210131288","display_name":"National Engineering School of Tunis","ror":"https://ror.org/03b1zjt31","country_code":"TN","type":"education","lineage":["https://openalex.org/I4210131288","https://openalex.org/I63596082"]}],"countries":["TN"],"is_corresponding":false,"raw_author_name":"Rahma Ben Ayed","raw_affiliation_strings":["ENIT-SysCom, Tunis, Tunisia"],"affiliations":[{"raw_affiliation_string":"ENIT-SysCom, Tunis, Tunisia","institution_ids":["https://openalex.org/I4210131288"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064585406","display_name":"Hanifa Boucheneb","orcid":"https://orcid.org/0000-0001-9158-6374"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Hanifa Boucheneb","raw_affiliation_strings":["VeriForm-Ecole Polytechnique de Montr\u00e9al"],"affiliations":[{"raw_affiliation_string":"VeriForm-Ecole Polytechnique de Montr\u00e9al","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002432033","display_name":"A. Hicheur","orcid":null},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]},{"id":"https://openalex.org/I4210145724","display_name":"Centre d'Etudes et De Recherche en Informatique et Communications","ror":"https://ror.org/044j5mm75","country_code":"FR","type":"facility","lineage":["https://openalex.org/I4210145724"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Awatef Hicheur","raw_affiliation_strings":["CEDRIC-CNAM, Paris, France"],"affiliations":[{"raw_affiliation_string":"CEDRIC-CNAM, Paris, France","institution_ids":["https://openalex.org/I4210145724","https://openalex.org/I124158823"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5028283340"],"corresponding_institution_ids":["https://openalex.org/I124158823","https://openalex.org/I4210145724"],"apc_list":null,"apc_paid":null,"fwci":0.5904,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.80057272,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"77","last_page":"84"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.8093457221984863},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8026844263076782},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.7458919286727905},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.7291592359542847},{"id":"https://openalex.org/keywords/workflow-management-system","display_name":"Workflow management system","score":0.6897521018981934},{"id":"https://openalex.org/keywords/workflow-technology","display_name":"Workflow technology","score":0.6740284562110901},{"id":"https://openalex.org/keywords/workflow-engine","display_name":"Workflow engine","score":0.6685075759887695},{"id":"https://openalex.org/keywords/xpdl","display_name":"XPDL","score":0.6314966678619385},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4788215756416321},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4753803312778473},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.4717208743095398},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.43780824542045593},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.4189378619194031},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.4078425467014313},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4039197266101837},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.29491910338401794},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.26169008016586304},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.20754215121269226}],"concepts":[{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.8093457221984863},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8026844263076782},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.7458919286727905},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7291592359542847},{"id":"https://openalex.org/C140824633","wikidata":"https://www.wikidata.org/wiki/Q2808660","display_name":"Workflow management system","level":3,"score":0.6897521018981934},{"id":"https://openalex.org/C19612761","wikidata":"https://www.wikidata.org/wiki/Q8034836","display_name":"Workflow technology","level":3,"score":0.6740284562110901},{"id":"https://openalex.org/C188220564","wikidata":"https://www.wikidata.org/wiki/Q3325097","display_name":"Workflow engine","level":3,"score":0.6685075759887695},{"id":"https://openalex.org/C130536060","wikidata":"https://www.wikidata.org/wiki/Q592375","display_name":"XPDL","level":4,"score":0.6314966678619385},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4788215756416321},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4753803312778473},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4717208743095398},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.43780824542045593},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.4189378619194031},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4078425467014313},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4039197266101837},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.29491910338401794},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26169008016586304},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.20754215121269226},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/crisis.2008.4757466","is_oa":false,"landing_page_url":"https://doi.org/10.1109/crisis.2008.4757466","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 Third International Conference on Risks and Security of Internet and Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:publications.polymtl.ca:21147","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/21147/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Communication de conf\u00e9rence"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4699999988079071}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W28116841","https://openalex.org/W1519156630","https://openalex.org/W1595155342","https://openalex.org/W1974447645","https://openalex.org/W1977764760","https://openalex.org/W2029227380","https://openalex.org/W2112218917","https://openalex.org/W2129858673","https://openalex.org/W2132883297","https://openalex.org/W2152505375","https://openalex.org/W2162022335","https://openalex.org/W2162868766","https://openalex.org/W2403302360","https://openalex.org/W4291295579","https://openalex.org/W4295007166","https://openalex.org/W4297666140","https://openalex.org/W6603441031","https://openalex.org/W6841670963","https://openalex.org/W6843361732","https://openalex.org/W6843427077"],"related_works":["https://openalex.org/W2091596831","https://openalex.org/W2376410910","https://openalex.org/W2373541195","https://openalex.org/W2365658322","https://openalex.org/W2374818432","https://openalex.org/W2347749445","https://openalex.org/W291310304","https://openalex.org/W2352344200","https://openalex.org/W2350255802","https://openalex.org/W2370109655"],"abstract_inverted_index":{"Traditional":[0],"modelling":[1],"and":[2,149,159],"analysis":[3],"of":[4,11,22,52,74,90,121,133,145],"workflow":[5,18,81,123,164],"aims":[6],"at":[7],"verifying":[8],"the":[9,20,26,45,53,55,61,72,80,98,106,118,131,134,138,142,146,156,163],"correctness":[10],"its":[12],"control":[13,119],"flow.":[14],"When":[15],"dealing":[16],"with":[17,25,64],"security,":[19],"compliance":[21],"information":[23,87,110],"flow":[24,88,111,120],"adopted":[27],"security":[28,69,107,135],"policies":[29],"needs":[30],"also":[31],"to":[32,66,77,86,104,129,151,162],"be":[33],"analyzed.":[34],"In":[35],"this":[36],"paper,":[37],"we":[38],"propose":[39],"a":[40,67,122],"two-steps":[41],"verification":[42],"approach.":[43],"While":[44],"first":[46],"step":[47],"is":[48,58,83,95],"concerned":[49,59],"by":[50,60,79],"soundness":[51],"workflow,":[54],"second":[56],"one":[57],"data":[62],"consistency":[63],"respect":[65],"multilevel":[68],"policy":[70],"where":[71],"granting":[73],"access":[75],"rights":[76],"objects":[78],"system":[82],"done":[84],"according":[85],"rules":[89,136],"Bell-LaPadula":[91],"model.":[92],"Our":[93],"approach":[94],"based":[96],"on":[97,109,137],"ECATNet":[99],"formalism.":[100],"It":[101],"offers":[102],"means":[103],"incorporate":[105],"constraints":[108],"into":[112],"an":[113],"initial":[114],"WF":[115],"net":[116],"modeling":[117],"specification.":[124],"We":[125],"then":[126],"show":[127],"how":[128,150],"analyze":[130],"impact":[132],"whole":[139],"Workflow":[140],"through":[141],"model":[143],"checker":[144],"MAUDE":[147],"environment":[148],"relax":[152],"them":[153],"before":[154],"producing":[155],"correct":[157],"specification":[158],"submitting":[160],"it":[161],"system.":[165]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-03-25T13:04:00.132906","created_date":"2025-10-10T00:00:00"}