Change-Driven Analysis of Timed Security Requirements for Data-Aware Workflow Processes

In recent years, due to the complexity of workflow processes and the fluctuation of business environments, the timed security requirements of workflow processes have attracted more and more attentions from the designers and users of workflow processes. The existing methods cannot analyze the security requirements of data-aware workflow processes with dynamic changes. In this paper, we propose a novel analysis approach to verify timed security requirements for data-aware workflow processes with dynamic changes. First, we analyze the feasibility of changes on workflow processes. Second, we propose the analysis procedure to automatically determine the affected segments of changes. Third, the timed security requirements affected by changes are obtained and verified without repeatedly analyzing all of them. Compared with the existing works, our approach can detect incorrect changes in advance so as to avoid meaningless analysis, also can reduce the cost and time of enterprises as well as eliminate repeated verification of all timed security requirements.