WorkFlow analyzed for security and privacy in using databases

Article type: Research Article

Authors: Teepe, Wouter^a | van de Riet, Reind^b | Olivier, Martin^c

Affiliations: [a] Department of Artificial Intelligence, State University of Groningen, Groningen, The Netherlands. E-mail: [email protected] | [b] Department of Mathematics and Computer Science, Vrije Universiteit, Amsterdam, The Netherlands. E-mail: [email protected] | [c] Department of Mathematics and Computer Science, Rand University, Johannesburg, South Africa. E-mail: [email protected]

Abstract: When companies interchange information about individuals, privacy is at stake. On the basis of the purpose of the information interchange, rules can be designed for an agent (Alter-ego) to determine whether the requested information can be provided. This purpose can be derived from a WorkFlow specification according to which employees (agents) of one company are executing their tasks. Direct information flow as well as information which might flow through private and covert channels is considered.

Keywords: Security & Privacy and Database systems, WorkFlow, Cyberspace, Object-Oriented Databases

DOI: 10.3233/JCS-2003-11305

Journal: Journal of Computer Security, vol. 11, no. 3, pp. 353-363, 2003