Verification of dynamic Separation of Duty policy for role-based business processes

Aashay Thipse, Rattikorn Hewett

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

3 Scopus citations


Separation of Duty (SoD) is a widely used security principle to help prevent frauds in a business process. Though SoD has been studied by many researchers, most of them are concerned with specifications of various types of SoD constraints for policy enforcement. For large organizations that employ SoD policies, the ability to automatically verify if a given user-role assignment complies with SoD policies is of the great value for security management. This paper proposes an algorithm for constraint checking of simple dynamic SoD. Unlike most previous work that enforces SoD policy at run time (when roles are activated), our approach examines policy enforcement build-time (prior to run rime, i.e. when roles are assigned to users but not activated).

Original languageEnglish
Title of host publication2008 IEEE Region 5 Conference
StatePublished - 2008
Event2008 IEEE Region 5 Conference - Kansas City, MO, United States
Duration: Apr 17 2008Apr 20 2008

Publication series

Name2008 IEEE Region 5 Conference


Conference2008 IEEE Region 5 Conference
Country/TerritoryUnited States
CityKansas City, MO


Dive into the research topics of 'Verification of dynamic Separation of Duty policy for role-based business processes'. Together they form a unique fingerprint.

Cite this