Detective information flow analysis for business processes

Zusammenfassung
We report on ongoing work towards a posteriori detection of illegal information flows for business processes, focusing on the challenges involved in doing so. Resembling a forensic investigation, our approach aims at analyzing the audit trails resultant from the execution of the business processes, locating informations flows that violate the (non-functional) requirements stipulated by security policies. The goal is to obtain fine-grained evidence of policy compliance with respect to information flows.
  • Vollständige Referenz
  • BibTeX
Accorsi, R. & Wonnemann, C., (2009). Detective information flow analysis for business processes. In: Abramowicz, W., Maciaszek, L., Kowalczyk, R. & Speck, A. (Hrsg.), Business process, services – computing and intelligent service management. Bonn: Gesellschaft für Informatik e.V.. (S. 223-224).
@inproceedings{mci/Accorsi2009,
author = {Accorsi, Rafael AND Wonnemann, Claus},
title = {Detective information flow analysis for business processes},
booktitle = {Business process, services – computing and intelligent service management},
year = {2009},
editor = {Abramowicz, Witold AND Maciaszek, Leszek AND Kowalczyk, Ryszard AND Speck, Andreas} ,
pages = { 223-224 },
publisher = {Gesellschaft für Informatik e.V.},
address = {Bonn}
}
DateienGroesseFormatAnzeige
gi-proc-147-015.pdf114.2Kb PDF Öffnen

Haben Sie fehlerhafte Angaben entdeckt? Sagen Sie uns Bescheid: Feedback abschicken

Mehr Information

ISBN: 978-3-88579-241-3
ISSN: 1617-5468
Datum: 2009
Sprache: en (en)
Typ: Text/Conference Paper
Sammlungen

Zur Langanzeige