{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,5]],"date-time":"2025-10-05T16:56:40Z","timestamp":1759683400132,"version":"3.41.0"},"reference-count":42,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2012,11,1]],"date-time":"2012-11-01T00:00:00Z","timestamp":1351728000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100004963","name":"Seventh Framework Programme","doi-asserted-by":"publisher","award":["216917"],"award-info":[{"award-number":["216917"]}],"id":[{"id":"10.13039\/501100004963","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Inf. Syst. Secur."],"published-print":{"date-parts":[[2012,11]]},"abstract":"<jats:p>Separation of Duties (SoD) aims at preventing fraud and errors by distributing tasks and associated authorizations among multiple users. Li and Wang [2008] proposed an algebra (SoDA) for specifying SoD requirements, which is both expressive in the requirements it formalizes and abstract in that it is not bound to a workflow model. In this article, we bridge the gap between the specification of SoD constraints modeled in SoDA and their enforcement in a dynamic, service-oriented enterprise environment. We proceed by generalizing SoDA's semantics to traces, modeling workflow executions that satisfy the respective SoDA terms. We then refine the set of traces induced by a SoDA term to also account for a workflow's control-flow and role-based authorizations. Our formalization, which is based on the process algebra CSP, supports the enforcement of SoD on general workflows and handles changing role assignments during workflow execution, addressing a well-known source of fraud.<\/jats:p>\n          <jats:p>The resulting CSP model serves as blueprint for a distributed and loosely coupled architecture where SoD enforcement is provisioned as a service. This concept, which we call SoD as a Service, facilitates a separation of concerns between business experts and security professionals. As a result, integration and configuration efforts are minimized and enterprises can quickly adapt to organizational, regulatory, and technological changes. We describe an implementation of SoD as a Service, which combines commercial components such as a workflow engine with newly developed components such as an SoD enforcement monitor. To evaluate our design decisions and to demonstrate the feasibility of our approach, we present a case study of a drug dispensation workflow deployed in a hospital.<\/jats:p>","DOI":"10.1145\/2382448.2382451","type":"journal-article","created":{"date-parts":[[2012,11,29]],"date-time":"2012-11-29T15:02:27Z","timestamp":1354201347000},"page":"1-30","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Dynamic enforcement of abstract separation of duty constraints"],"prefix":"10.1145","volume":"15","author":[{"given":"David","family":"Basin","sequence":"first","affiliation":[{"name":"ETH Zurich, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Samuel J.","family":"Burri","sequence":"additional","affiliation":[{"name":"ETH Zurich and IBM Research -- Zurich, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"G\u00fcnter","family":"Karjoth","sequence":"additional","affiliation":[{"name":"IBM Research -- Zurich, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,11,30]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Agrawal A. Amend M. Das M. etal 2007. WS-BPEL extension for people (BPEL4People) v. 1.0. http:\/\/download.boulder.ibm.com\/ibmdl\/pub\/software\/dru\/specs\/ws-bpel4people\/BPEL4people_v1.pdf.  Agrawal A. Amend M. Das M. et al. 2007. WS-BPEL extension for people (BPEL4People) v. 1.0. http:\/\/download.boulder.ibm.com\/ibmdl\/pub\/software\/dru\/specs\/ws-bpel4people\/BPEL4people_v1.pdf."},{"key":"e_1_2_1_2_1","unstructured":"Alves A. Arkin A. Askary S. Bloch B. Curbera F. etal 2007. Web services business process execution language (BPEL) v. 2.0. OASIS Standard. http:\/\/docs.oasis-open.org\/wsbpel\/2.0\/OS\/wsbpel-v2.0-OS.html.  Alves A. Arkin A. Askary S. Bloch B. Curbera F. et al. 2007. Web services business process execution language (BPEL) v. 2.0. OASIS Standard. http:\/\/docs.oasis-open.org\/wsbpel\/2.0\/OS\/wsbpel-v2.0-OS.html."},{"key":"e_1_2_1_3_1","unstructured":"Anderson A. 2005. Hierarchical resource profile of XACML v.2.0. OASIS Standard. http:\/\/docs.oasis-open. org\/xacml\/2.0\/access_control-xacml-2.0-hier-profile-spec-os.pdf.  Anderson A. 2005. Hierarchical resource profile of XACML v.2.0. OASIS Standard. http:\/\/docs.oasis-open. org\/xacml\/2.0\/access_control-xacml-2.0-hier-profile-spec-os.pdf."},{"volume-title":"v. 1.5.1","author":"Apache","key":"e_1_2_1_4_1","unstructured":"Apache . 2009. Apache Axis2 , v. 1.5.1 . The Apache Software Foundation (ASF) , Forest Hill, MD . Apache. 2009. Apache Axis2, v. 1.5.1. The Apache Software Foundation (ASF), Forest Hill, MD."},{"key":"e_1_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Basin D. Burri S. J. and \n      Karjoth G\n  . \n  2009\n  . Dynamic enforcement of abstract separation of duty constraints. In Proceedings of the 14th European Symposium on Research in Computer Security (ESORICS'09). M. Backes and P. Ning Eds. Lecture Notes in Computer Science vol. \n  5789 Springer 250--267.   Basin D. Burri S. J. and Karjoth G. 2009. Dynamic enforcement of abstract separation of duty constraints. In Proceedings of the 14 th European Symposium on Research in Computer Security (ESORICS'09). M. Backes and P. Ning Eds. Lecture Notes in Computer Science vol. 5789 Springer 250--267.","DOI":"10.1007\/978-3-642-04444-1_16"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966972"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2011.14"},{"key":"e_1_2_1_8_1","unstructured":"Basin D. Burri S. J. and Karjoth G. 2011c. Dynamic enforcement of abstract separation of duty constraints. Tech. rep. RZ 3812. IBM Research-Zurich.  Basin D. Burri S. J. and Karjoth G. 2011c. Dynamic enforcement of abstract separation of duty constraints. Tech. rep. RZ 3812. IBM Research-Zurich."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295154"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1125808.1125810"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/775412.775425"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1229285.1229299"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/300830.300837"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2005.12.038"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1063979.1063986"},{"key":"e_1_2_1_16_1","unstructured":"The Economist. 2001. Enron see you in court. The Economist (11\/15\/01).  The Economist. 2001. Enron see you in court. The Economist (11\/15\/01)."},{"volume-title":"European fraud survey 2009 -- Is integrity a casualty of the downturn&quest","author":"Ernest","key":"e_1_2_1_17_1","unstructured":"Ernest and Young. 2009. European fraud survey 2009 -- Is integrity a casualty of the downturn&quest ; Tech. rep., Ernest & Young . Ernest and Young. 2009. European fraud survey 2009 -- Is integrity a casualty of the downturn&quest; Tech. rep., Ernest & Young."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"volume-title":"Proceedings of the 19th IEEE Symposium on Security and Privacy (S&P'98)","author":"Gligor V. D.","key":"e_1_2_1_19_1","unstructured":"Gligor , V. D. , Gavrila , S. I. , and Ferraiolo , D . 1998. On the formal definition of separation-of-duty policies and their composition . In Proceedings of the 19th IEEE Symposium on Security and Privacy (S&P'98) . IEEE Computer Society Press, 172--183. Gligor, V. D., Gavrila, S. I., and Ferraiolo, D. 1998. On the formal definition of separation-of-duty policies and their composition. In Proceedings of the 19th IEEE Symposium on Security and Privacy (S&P'98). IEEE Computer Society Press, 172--183."},{"volume-title":"Insurance application architecture (IAA)","key":"e_1_2_1_20_1","unstructured":"IBM. 2011a. Insurance application architecture (IAA) . IBM Corporation , Armonk, NY . IBM. 2011a. Insurance application architecture (IAA). IBM Corporation, Armonk, NY."},{"volume-title":"Tivoli directory server (TDS), v. 6","key":"e_1_2_1_21_1","unstructured":"IBM. 2011b. Tivoli directory server (TDS), v. 6 . IBM Corporation , Armonk, NY . IBM. 2011b. Tivoli directory server (TDS), v. 6. IBM Corporation, Armonk, NY."},{"volume-title":"WebSphere application server (WAS), v. 6.1","key":"e_1_2_1_22_1","unstructured":"IBM. 2011c. WebSphere application server (WAS), v. 6.1 . IBM Corporation , Armonk, NY . IBM. 2011c. WebSphere application server (WAS), v. 6.1. IBM Corporation, Armonk, NY."},{"volume-title":"WebSphere process server (WPS), v. 6.2","key":"e_1_2_1_23_1","unstructured":"IBM. 2011d. WebSphere process server (WPS), v. 6.2 . IBM Corporation , Armonk, NY . IBM. 2011d. WebSphere process server (WPS), v. 6.2. IBM Corporation, Armonk, NY."},{"key":"e_1_2_1_24_1","first-page":"199","article-title":"Modeling and analyzing separation of duties in workflow environments","volume":"65","author":"Knorr K.","year":"2002","unstructured":"Knorr , K. and Stormer , H. 2002 . Modeling and analyzing separation of duties in workflow environments . Int. Fed. Inf. Process. 65 , 199 -- 212 . Knorr, K. and Stormer, H. 2002. Modeling and analyzing separation of duties in workflow environments. Int. Fed. Inf. Process. 65, 199--212.","journal-title":"Int. Fed. Inf. Process."},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1379759.1379760"},{"key":"e_1_2_1_26_1","unstructured":"Marino D. Potral J. J. Hall M. Rodriguez C. B. Rodriguez P. S. Sobota J. Jiri M. and Asnar Y. D. W. 2009. D1.2.1: Master scenarios. Deliverable of FP7 EU Project MASTER.  Marino D. Potral J. J. Hall M. Rodriguez C. B. Rodriguez P. S. Sobota J. Jiri M. and Asnar Y. D. W. 2009. D1.2.1: Master scenarios. Deliverable of FP7 EU Project MASTER."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1998441.1998453"},{"volume-title":"Proceedings of the IEEE Symposium on Security and Privacy (S&P'90)","author":"Nash M. J.","key":"e_1_2_1_28_1","unstructured":"Nash , M. J. and Poland , K. R . 1990. Some conundrums concerning separation of duty . In Proceedings of the IEEE Symposium on Security and Privacy (S&P'90) . IEEE Computer Society Press, 201--207. Nash, M. J. and Poland, K. R. 1990. Some conundrums concerning separation of duty. In Proceedings of the IEEE Symposium on Security and Privacy (S&P'90). IEEE Computer Society Press, 201--207."},{"key":"e_1_2_1_29_1","unstructured":"OMG. 2011. Business process model and notation (BPMN) v. 2.0. OMG Standard.  OMG. 2011. Business process model and notation (BPMN) v. 2.0. OMG Standard."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.4018\/jwsr.2008070102"},{"volume-title":"The Theory and Practice of Concurrency","author":"Roscoe A. W.","key":"e_1_2_1_31_1","unstructured":"Roscoe , A. W. 1997. The Theory and Practice of Concurrency . Prentice Hall , Upper Saddle River, NJ. Roscoe, A. W. 1997. The Theory and Practice of Concurrency. Prentice Hall, Upper Saddle River, NJ."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.1988.113349"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133058.1133079"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353382"},{"volume-title":"Proceedings of the 10th IEEE Workshop on Computer Security Foundations (CSFW'97)","author":"Simon R.","key":"e_1_2_1_36_1","unstructured":"Simon , R. and Zurko , M. E . 1997. Separation of duty in role-based environments . In Proceedings of the 10th IEEE Workshop on Computer Security Foundations (CSFW'97) . IEEE Computer Society Press, 183--194. Simon, R. and Zurko, M. E. 1997. Separation of duty in role-based environments. In Proceedings of the 10th IEEE Workshop on Computer Security Foundations (CSFW'97). IEEE Computer Society Press, 183--194."},{"volume-title":"Sarbanes-Oxley act of","year":"2002","key":"e_1_2_1_37_1","unstructured":"SOX. 2002. Sarbanes-Oxley act of 2002 . United States Government Printing Office . SOX. 2002. Sarbanes-Oxley act of 2002. United States Government Printing Office."},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the Workshop on Multiset Processing (WMP'00)","volume":"2235","author":"Syropoulos A.","year":"2000","unstructured":"Syropoulos , A. 2000 . Mathematics of multisets . In Proceedings of the Workshop on Multiset Processing (WMP'00) . C. S. Calude, G. Paun, G. Rozenberg, and A. Salomaa, Eds., Lecture Notes in Computer Science , vol. 2235 ., Springer, 347--358. Syropoulos, A. 2000. Mathematics of multisets. In Proceedings of the Workshop on Multiset Processing (WMP'00). C. S. Calude, G. Paun, G. Rozenberg, and A. Salomaa, Eds., Lecture Notes in Computer Science, vol. 2235., Springer, 347--358."},{"volume-title":"Proceedings of the IEEE International Conference on Web Services (ICWS'07)","author":"Thomas J.","key":"e_1_2_1_39_1","unstructured":"Thomas , J. , Paci , F. , Bertino , E. , and Eugster , P . 2007. User tasks and access control over web services . In Proceedings of the IEEE International Conference on Web Services (ICWS'07) . IEEE Computer Society Press, 60--69. Thomas, J., Paci, F., Bertino, E., and Eugster, P. 2007. User tasks and access control over web services. In Proceedings of the IEEE International Conference on Web Services (ICWS'07). IEEE Computer Society Press, 60--69."},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2003.1236470"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1229285.1229315"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-88194-0_22"}],"container-title":["ACM Transactions on Information and System Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2382448.2382451","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2382448.2382451","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:34:37Z","timestamp":1750239277000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2382448.2382451"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,11]]},"references-count":42,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2012,11]]}},"alternative-id":["10.1145\/2382448.2382451"],"URL":"https:\/\/doi.org\/10.1145\/2382448.2382451","relation":{},"ISSN":["1094-9224","1557-7406"],"issn-type":[{"type":"print","value":"1094-9224"},{"type":"electronic","value":"1557-7406"}],"subject":[],"published":{"date-parts":[[2012,11]]},"assertion":[{"value":"2011-01-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2012-05-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2012-11-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}