Pre-execution security policy assessment of remotely defined BPEL-based grid processes

  • Authors:

  • Klaus-Peter Fischer;Udo Bleimann;Steven Furnell

  • Affiliations:

  • Digamma Communications Consulting GmbH, Mühltal, Germany and Aida Institute of Applied Informatics Darmstadt, University of Applied Sciences Darmstadt, Darmstadt, Germany and University of Pl ...;Aida Institute of Applied Informatics Darmstadt, University of Applied Sciences Darmstadt, Darmstadt, Germany;University of Plymouth, Plymouth, United Kingdom

  • Venue:
  • TrustBus'07 Proceedings of the 4th international conference on Trust, Privacy and Security in Digital Business
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper results from research on security policy enforcement for cross-domain defined business processes specified in BPEL are transferred to the field of Grid computing, where BPEL is used to define Grid processes. In order to facilitate the assessment of remotely defined BPEL-based Grid processes for compliance with security policies prior to execution, a method for specifying security policies with respect to security-relevant semantic patterns in BPEL is applied. The paper shows the extent to which transfer of the former results was successful and indicates limitations and areas of further research. Where the situation is similar to cooperative business processes, such as in forming dynamic virtual organizations using Grid technology, the results turned out to be transferable with minor modifications, whereas for a transfer to the Grid context in general further investigation is required (in particular with respect to formal specification of security-relevant semantics of Grid services).