Controlling break-the-glass through alignment

Research output: Contribution to journalArticlepeer-review

184 Downloads (Pure)

Abstract

Modern IT systems have to deal with unpredictable situations and exceptions more and more often. In contrast, security mechanisms are usually very rigid. This causes organizations to employ functionality like break-the-glass that allows users to bypass security mechanisms in case of emergencies. However, break-the-glass introduces a weak point in the system and can be misused. In this paper, we present a flexible framework for controlling the use of break-the-glass using the notion of alignments. The framework measures to what extent a process execution diverges from the specification (i.e., using optimal alignments) and revokes the exceptional permissions granted to cope with the emergency when the severity of deviations cannot be tolerated. To measure the severity of deviations, we extend alignment-based deviation analysis techniques. In particular, our technique is able to identify high-level deviations such as activity replacements and swaps; hence it provides a more accurate diagnosis of deviations than classical optimal alignments. Our work is implemented as a ProM~6 plug-in and evaluated using both synthetic and real-life data.
Original languageEnglish
Pages (from-to)198-212
Number of pages15
JournalAdvanced Science Express
Volume2
Issue number4
Publication statusPublished - 2013

Fingerprint

Dive into the research topics of 'Controlling break-the-glass through alignment'. Together they form a unique fingerprint.

Cite this