Abstract
Modern IT systems have to deal with unpredictable situations and exceptions more and more often. In contrast, security mechanisms are usually very rigid. Functionality like break-the-glass is thus employed to allow users to bypass security mechanisms in case of emergencies. However, break-the-glass introduces a weak point in the system. In this paper, we present a flexible framework for controlling the use of break-the-glass using the notion of alignments. The framework measures to what extent a process execution diverges from the specification (i.e., using optimal alignments) and revokes the exceptional permissions granted to cope with the emergency when the severity of deviations cannot be tolerated. For the quantification of the severity of deviations, we extend alignment-based deviation analysis techniques by supporting the detection of high-level deviations such as activity replacements and swaps, hence providing a more accurate diagnosis of deviations than classical optimal alignments.
Original language | English |
---|---|
Title of host publication | Proceedings of the 5th ASE/IEEE International Conference on Information Privacy, Security, Risk and Trust (PASSAT 2013, Washington DC, USA, September 8-14, 2013) |
Place of Publication | Piscataway |
Publisher | Institute of Electrical and Electronics Engineers |
Pages | 606-611 |
ISBN (Print) | 978-0-7695-5137-1 |
DOIs | |
Publication status | Published - 2013 |
Event | conference; 5th ASE/IEEE International Conference on Information Privacy, Security, Risk and Trust; 2013-09-08; 2013-09-14 - Duration: 8 Sep 2013 → 14 Sep 2013 |
Conference
Conference | conference; 5th ASE/IEEE International Conference on Information Privacy, Security, Risk and Trust; 2013-09-08; 2013-09-14 |
---|---|
Period | 8/09/13 → 14/09/13 |
Other | 5th ASE/IEEE International Conference on Information Privacy, Security, Risk and Trust |