English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

This paper introduces a formal metamodel for the specification of securitypolicies for workflows in online service systems designed to be suitable forthe modeling and analysis of complex business-related rules as well astraditional access control. A translation of the model into a colored Petri netis shown and an example of policy for an online banking system is described. Bywriting predicates for querying the resulting state-space of the Petri net, aconnection between the formalized model and a higher-level description of thesecurity policy can be made, indicating the feasibility of the intended methodfor validating such descriptions. Thanks to the independent nature among tasksrelated to different business services, represented by restrictions in theinformation flow within the metamodel, the state-space may be fractioned foranalysis, avoiding the state-space explosion problem. Related existing modelsare discussed, pointing the gain in expressiveness of business rules and theanalysis of insecure state paths rather than simply insecure states in theproposed model. The successful representation and analysis of the policy fromthe example combined with reasonings for the general case attest the adequacyof the proposed approach for its intended application.

Security Policies for WFMS with Rich Business Logic - A Model Suitable for Analysis