Securing cloud workflows using Aggressive Chinese Wall Security Policy

Abstract

Workflow Management Systems (WfMSs) help big enterprises in automation of their business processes and thus help the management to take critical decisions fast. The WfMSs can be combined with the power of Cloud Computing to harness the strengths of both the technologies. The use of WfMSs for critical and strategic applications, which is common in case of business and scientific community, gives rise to major concerns regarding the threats against integrity, authorization, availability etc. Security is a major concern in case of the Cloud Computing platform too. The Aggressive Chinese Wall Security Policy (ACWSP) aims at mitigating the conflict of interest scenarios in commercial organizations. This paper discusses how to implement ACWSP in WfMSs along with the Role Based Access Control (RBAC) through an API. Further this paper throws light on how the ACWSP can be applied to various layers in the Cloud Computing Service Model. © 2014 IEEE.