Modeling and analyzing separation of duties in workflow environments

Abstract

With the rise of global networks like the Internet the importance of workflow systems is growing. However, security questions in such environments often only address secure communication. Another important topic that is often ignored is the separation of duties which is an important part of a company's security policy to prevent fraud. This paper introduces a prototype that supports the graphical modeling and analysis of separation of duties in workflow environments. Security officers can use this tool to design and analyze the security rules associated with workflow specifications. © 2002 Kluwer Academic / Plenum Publishers, New York.