Verifying the Interplay of Authorization Policies and Workflow in Service-Oriented Architectures

  • Silvio Ranise | INRIA

A widespread design approach in distributed applications based on the service-oriented paradigm, such as web-services, consists of clearly separating the enforcement of authorization policies and the workflow of the applications, so that the interplay between the policy level and the workflow level is abstracted away. While such an approach is attractive because it is quite simple and permits one to reason about crucial properties of the policies under consideration, it does not provide the right level of abstraction to specify and reason about the way the workflow may interfere with the policies, and vice versa.

Speaker Details

Silvio Ranise has a permanent research position at INRIA from September 2002, in the LORIA laboratory common to CNRS, INRIA and the Universities of Nancy. He is now on-leave to work in the European project AVANTSSAR (at the University of Verona) aimed at the verification of Software Oriented Architectures. He got his PhD in January 2002 from the University of Genova (Italy) and the University of Nancy 1 (France) under a joint PhD program. His research interests are model checking, web service and program verification, automated deduction, decision procedures. He has initiated the workshop series “Pragmatics of Decision Procedures in Automated Deduction (PDPAR)” (now called SMT workshop) and the “Satisfiability Modulo Theory Library (SMT-LIB).”

Watch Next