@article {Boughrous2022321,
	title = {The Pandemic Impact on Organizations Security and Resiliency: The Workflow Satisfiability Problem},
	journal = {Lecture Notes in Networks and Systems},
	volume = {420 LNNS},
	year = {2022},
	note = {cited By 0},
	pages = {321-329},
	abstract = {The new work model imposed during the pandemic impacted organizations badly, especially those with rigid business strategies. Therefore, they were forced to provide digital platforms for their clients and allow remote work for employees. The rapid shift to remote work increased cyberthreats and attack vectors. Thus, organizations had to enforce their security policy, apply security constraints for a safe and secure inter-organizational collaborations. Consequently, the absence of employees because of the pandemic and the rigid application of the security policy caused the unavailability of collaborating organizations. Thus, the execution of inter-organizational workflow may not be complete, which increases the possibility that the workflow satisfiability problem (WSP) occurs. In this paper, we present an approach to selecting an inter-organizational workflow assignment plan. It uses the multicriteria decision method and Bayesian inference to select organizations for collaboration. The approach aims to ensure resilient and secure inter-organizational workflow execution with a low probability for the WSP. {\textcopyright} 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.},
	doi = {10.1007/978-3-030-96305-7_30},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85126376866\&doi=10.1007\%2f978-3-030-96305-7_30\&partnerID=40\&md5=15bd75caca2d063eff65da1b12210dba},
	author = {Boughrous, M. and El Bakkali, H. and El Kandoussi, A.}
}
@article {Boughrous2021,
	title = {A Workflow Criticality-Based Approach to Bypass the Workflow Satisfiability Problem},
	journal = {Security and Communication Networks},
	volume = {2021},
	year = {2021},
	note = {cited By 1},
	abstract = {Workflow management systems are very important for any organization to manage and model complex business processes. However, significant work is needed to keep a workflow resilient and secure. Therefore, organizations apply a strict security policy and enforce access control constraints. As a result, the number of available and authorized users for the workflow execution decreases drastically. Thus, in many cases, such a situation leads to a workflow deadlock situation, where there no available authorized user-task assignments for critical tasks to accomplish the workflow execution. In the literature, this problem has gained interest of security researchers in the recent years, and is known as the workflow satisfiability problem (WSP). In this paper, we propose a new approach to bypass the WSP and to ensure workflow resiliency and security. For this purpose, we define workflow criticality, which can be used as a metric during run-time to prevent WSP. We believe that the workflow criticality value will help workflow managers to make decisions and start a mitigation solution in case of a critical workflow. Moreover, we propose a delegation process algorithm (DP) as a mitigation solution that uses workflow instance criticality, delegation, and priority concepts to find authorized and suitable users to perform the critical task with low-security risks. {\textcopyright} 2021 Monsef Boughrous and Hanan El Bakkali.},
	keywords = {Access control, Authorized users, Business Process, Control constraint, Critical tasks, Criticality (nuclear fission), Formal logic, Model complexes, Satisfiability problems, Security policy, Work simplification, Work-flows, Workflow execution, Workflow management systems},
	doi = {10.1155/2021/3330923},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85124874650\&doi=10.1155\%2f2021\%2f3330923\&partnerID=40\&md5=a958e90ff68d41b558bc1c7246398557},
	author = {Boughrous, M. and El Bakkali, H.}
}
@article {Boughrous2018361,
	title = {A comparative study on access control models and security requirements in workflow systems},
	journal = {Advances in Intelligent Systems and Computing},
	volume = {735},
	year = {2018},
	pages = {361-373},
	doi = {10.1007/978-3-319-76354-5_33},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85044028585\&doi=10.1007\%2f978-3-319-76354-5_33\&partnerID=40\&md5=851681ec1b732c7bb36870825ef48643},
	author = {Boughrous, M. and El Bakkali, H.}
}
