Secure Workflow Development from Early Requirements Analysis

Abstract

Requirements engineering is being increasingly adopted as a key step in the software development process and so new challenges and possibilities emerge. Designing of Web services and developing of business processes and workflows for Web services is one of the most thought challenging issues in requirements engineering. The research on Web services design is well under way, but the existing design methodologies for Web services do not address the issue of developing secure Web services, secure business processes and secure workflows. For the purpose of developing secure workflows based on the early requirements analysis, in this work, we propose a refinement methodology and a language that allows the workflow engine to automatically enforce trust and delegation requirements. Those workflows are then to be distributed; the security aspects being enforced dynamically at runtime accordingly to the identified requirements. To make the discussion more concrete, we illustrate the proposal with an e-business banking case study.