{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:25:51Z","timestamp":1781105151567,"version":"3.54.1"},"reference-count":24,"publisher":"IGI Global Scientific Publishing","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,4]]},"abstract":"<jats:p>The authors describe a formal methodology for the automatic synthesis of a secure orchestrator for a set of BPMN processes. The synthesized orchestrator is able to guarantee that all the processes that are started reach their end, and the resulting orchestrator process is secure, that is, it does not allow the disclosure of certain secret messages. The authors present an implementation of a forth and back translation from BPMN to Crypto-CCS, that permits them to exploit the previously existing PaMoChSA tool to synthesize BPMN orchestrators. Furthermore, they study the problem of ranking orchestrators based on quantitative valuations of a process, the temporal evolution of such valuations, and their security, as a function of the knowledge of the attacker.<\/jats:p>","DOI":"10.4018\/ijsse.2014040103","type":"journal-article","created":{"date-parts":[[2014,9,2]],"date-time":"2014-09-02T09:06:38Z","timestamp":1409648798000},"page":"44-64","source":"Crossref","is-referenced-by-count":1,"title":["Automated Synthesis and Ranking of Secure BPMN Orchestrators"],"prefix":"10.4018","volume":"5","author":[{"given":"Vincenzo","family":"Ciancia","sequence":"first","affiliation":[{"name":"The \u201cAlessandro Faedo\u201d Institute of Information Science and Technology, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jose","family":"Martin","sequence":"additional","affiliation":[{"name":"The Institute of Informatics and Telematics, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabio","family":"Martinelli","sequence":"additional","affiliation":[{"name":"The Institute of Informatics and Telematics, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[{"name":"The Institute of Informatics and Telematics, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marinella","family":"Petrocchi","sequence":"additional","affiliation":[{"name":"The Institute of Informatics and Telematics, Pisa, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ernesto","family":"Pimentel","sequence":"additional","affiliation":[{"name":"University of Malaga, Malaga, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"ijsse.2014040103-0","unstructured":"W3C. (2013). Xquery 3.0: An xml query language. Available at www.w3.org\/TR\/xquery-30\/"},{"key":"ijsse.2014040103-1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19125-1_3"},{"key":"ijsse.2014040103-2","unstructured":"Bistarelli, S. (2004). Semirings for soft constraint solving and programming (LNCS vol. 2962). Springer Verlag."},{"key":"ijsse.2014040103-3","doi-asserted-by":"crossref","unstructured":"Brucker, A. D., Hang, I., L\u00fcckemeyer, G., & Ruparel, R. (2012). SecureBPMN: Modeling and enforcing access control requirements in business processes. In Proceedings of the 17th ACM symposium on Access Control Models and Technologies (SACMAT \u201912). New York, NY: ACMpp. Available at http:\/\/doi.acm.org\/10.1145\/2295136.2295160","DOI":"10.1145\/2295136.2295160"},{"key":"ijsse.2014040103-4"},{"key":"ijsse.2014040103-5"},{"key":"ijsse.2014040103-6","article-title":"Quantitative evaluation of enforcement strategies","author":"V.Ciancia","year":"2013","journal-title":"FPS"},{"key":"ijsse.2014040103-7","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"ijsse.2014040103-8","unstructured":"IIT- Security Group. (2013). PaMoChSA 2012. Retrieved from http:\/\/www.iit.cnr.it\/staff\/vincenzo.ciancia\/tools.html"},{"key":"ijsse.2014040103-9","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(01)00291-2"},{"key":"ijsse.2014040103-10"},{"key":"ijsse.2014040103-11","doi-asserted-by":"crossref","unstructured":"Marchignoli, D., & Martinelli, F. (1999). Automatic verification of cryptographic protocols through compositional analysis techniques. Tools and algorithms for the construction and analysis of systems (pp. 148-162).","DOI":"10.1007\/3-540-49059-0_11"},{"key":"ijsse.2014040103-12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlap.2011.08.001"},{"key":"ijsse.2014040103-13","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlap.2010.07.001"},{"key":"ijsse.2014040103-14","first-page":"304","article-title":"Languages for description and analysis of authentication protocols.","author":"F.Martinelli","year":"1998","journal-title":"Proceedings of 6th Italian Conference on Theoretical Computer Science"},{"key":"ijsse.2014040103-15","doi-asserted-by":"publisher","DOI":"10.1016\/S0304-3975(02)00596-0"},{"key":"ijsse.2014040103-16","author":"F.Martinelli","year":"2010","journal-title":"A framework for automatic generation of security controller"},{"key":"ijsse.2014040103-17","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45811-5_32"},{"key":"ijsse.2014040103-18","doi-asserted-by":"publisher","DOI":"10.4018\/jsse.2013040101"},{"key":"ijsse.2014040103-19","author":"R.Milner","year":"1989","journal-title":"Communication and concurrency"},{"key":"ijsse.2014040103-20","unstructured":"Object Management Group. (2011). Business process model and notation (BPMN). Available at http:\/\/www.omg.org\/spec\/BPMN\/2.0\/PDF\/"},{"key":"ijsse.2014040103-21","unstructured":"Object Management Group. (2012). Introduction to OMG\u2019s unified modeling language. Available at http:\/\/www.omg.org\/spec\/UML\/ISO\/19505-1\/PDF\/"},{"key":"ijsse.2014040103-22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68265-3_16"},{"key":"ijsse.2014040103-23","first-page":"69","article-title":"Automated security protocol analysis with the AVISPA tool.","volume":"155","author":"L.Vigan\u00f2","year":"2006","journal-title":"ENTCS"}],"container-title":["International Journal of Secure Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=113726","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,11,20]],"date-time":"2018-11-20T21:39:52Z","timestamp":1542749992000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/ijsse.2014040103"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2014,4]]},"references-count":24,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.4018\/ijsse.2014040103","relation":{},"ISSN":["1947-3036","1947-3044"],"issn-type":[{"value":"1947-3036","type":"print"},{"value":"1947-3044","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,4]]}}}