{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T05:52:21Z","timestamp":1747806741162},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2007]]},"DOI":"10.1109\/secureware.2007.4385334","type":"proceedings-article","created":{"date-parts":[[2008,7,21]],"date-time":"2008-07-21T17:16:34Z","timestamp":1216660594000},"page":"201-210","source":"Crossref","is-referenced-by-count":8,"title":["Formal Verification of Business Workflows and Role Based Access Control Systems"],"prefix":"10.1109","author":[{"given":"Arnaud","family":"Dury","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sergiy","family":"Boroday","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexandre","family":"Petrenko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Volkmar","family":"Lotz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Change management: verification and change-impact analysis of access-control policies","author":"fisler","year":"2005","journal-title":"27th International Conference on Software Engineering"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/INDIN.2003.1300286"},{"key":"ref31","first-page":"219","article-title":"Information Security","author":"guelev","year":"2004","journal-title":"Model-checking access control policies"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/775412.775438"},{"key":"ref11","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-31979-5_13","article-title":"Conformance checking of RBAC policy and its implementation","author":"hansen","year":"2005","journal-title":"Proceedings of the First International Conference on Information Security Practice and Experience"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39979-7_17"},{"key":"ref13","article-title":"Typed static analysis for concurrent policy-based resource access control","author":"nguyen","year":"2005","journal-title":"unpublished draft"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/967900.968003"},{"journal-title":"Woflan tool (on-line)","year":"0","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48234-2_7"},{"key":"ref17","article-title":"Verification of business processes for web services","author":"koshkina","year":"2003","journal-title":"Technical Report CS-2003-11"},{"journal-title":"WSAT Tool","year":"0","key":"ref18"},{"key":"ref19","article-title":"Dynamic change in workflow-based coordination of distributed services","author":"bose","year":"2001","journal-title":"International workshop on Self-adaptive software"},{"key":"ref28","article-title":"Business Process Modeling with EPC and UML: Transformation or Integration?","author":"n\u00fcttgens","year":"1997","journal-title":"The Unified Modeling Language Technical Aspects and Applications"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36578-8_20"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIME.2003.1214874"},{"key":"ref3","article-title":"An access control model for simplifying constraint expression","author":"tidswell","year":"2000","journal-title":"7th ACM Conference on Computer and Communications Security"},{"key":"ref6","article-title":"RBAC schema verification using lightweight formal model and constraint analysis","author":"zao","year":"2003","journal-title":"ACM Symposium on Access Control Models and Technologies"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/581271.581276"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/507712.507714"},{"key":"ref8","article-title":"Automated verification of access control policies","author":"hughes","year":"2004","journal-title":"Technical Report 2004&#x2013;10"},{"key":"ref7","article-title":"Access control policies: modeling and validation","author":"mankai","year":"2005","journal-title":"Notere Conf&#x00E9;rence sur les Nouvelles technologies de la r&#x00E9;partition Canada"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/10722468_17"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/11424857_105"},{"key":"ref1","article-title":"Model Checking Access Control in Business Workflow","author":"dury","year":"2006","journal-title":"Technical Report CRIM-06 10&#x2013;11"},{"key":"ref20","article-title":"On mutually-exclusi ve roles and separation of duty","author":"li","year":"2004","journal-title":"ACM Conference on Computer and Communications Security"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/POLICY.2006.5"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/775412.775419"},{"key":"ref24","article-title":"Security analysis and administrative insider threat assessment in role-based access control","author":"jha","year":"2005","journal-title":"CERIAS Tech Report 2005-77 Center for Education and Research in Information Assurance and Security Purdue University"},{"key":"ref23","article-title":"Generalized role-based access control for securing future applications","author":"covington","year":"2000","journal-title":"23rd National Information Systems Security Conference"},{"journal-title":"Temporal and Modal Logic In Handbook of Theoretical Computer Science Volume B Formal Models and Semantics","year":"1990","author":"emerson","key":"ref26"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1029133.1029141"}],"event":{"name":"The International Conference on Emerging Security Information, Systems, and Technologies (SECUREWARE 2007)","start":{"date-parts":[[2007,10,14]]},"location":"Valencia, Spain","end":{"date-parts":[[2007,10,20]]}},"container-title":["The International Conference on Emerging Security Information, Systems, and Technologies (SECUREWARE 2007)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/4385293\/4385294\/04385334.pdf?arnumber=4385334","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,18]],"date-time":"2017-06-18T06:10:14Z","timestamp":1497766214000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/4385334\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/secureware.2007.4385334","relation":{},"subject":[],"published":{"date-parts":[[2007]]}}}