@article {Boughrous2021,
	title = {A Workflow Criticality-Based Approach to Bypass the Workflow Satisfiability Problem},
	journal = {Security and Communication Networks},
	volume = {2021},
	year = {2021},
	note = {cited By 1},
	abstract = {Workflow management systems are very important for any organization to manage and model complex business processes. However, significant work is needed to keep a workflow resilient and secure. Therefore, organizations apply a strict security policy and enforce access control constraints. As a result, the number of available and authorized users for the workflow execution decreases drastically. Thus, in many cases, such a situation leads to a workflow deadlock situation, where there no available authorized user-task assignments for critical tasks to accomplish the workflow execution. In the literature, this problem has gained interest of security researchers in the recent years, and is known as the workflow satisfiability problem (WSP). In this paper, we propose a new approach to bypass the WSP and to ensure workflow resiliency and security. For this purpose, we define workflow criticality, which can be used as a metric during run-time to prevent WSP. We believe that the workflow criticality value will help workflow managers to make decisions and start a mitigation solution in case of a critical workflow. Moreover, we propose a delegation process algorithm (DP) as a mitigation solution that uses workflow instance criticality, delegation, and priority concepts to find authorized and suitable users to perform the critical task with low-security risks. {\textcopyright} 2021 Monsef Boughrous and Hanan El Bakkali.},
	keywords = {Access control, Authorized users, Business Process, Control constraint, Critical tasks, Criticality (nuclear fission), Formal logic, Model complexes, Satisfiability problems, Security policy, Work simplification, Work-flows, Workflow execution, Workflow management systems},
	doi = {10.1155/2021/3330923},
	url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-85124874650\&doi=10.1155\%2f2021\%2f3330923\&partnerID=40\&md5=a958e90ff68d41b558bc1c7246398557},
	author = {Boughrous, M. and El Bakkali, H.}
}
@article {9268371220130801,
	title = {Enhancing Workflow Systems Resiliency by Using Delegation and Priority Concepts.},
	journal = {Journal of Digital Information Management},
	volume = {11},
	number = {4},
	year = {2013},
	pages = {267 - 276},
	abstract = {Enforcing dynamic access control constraints in workflow management systems (WFMS) is a very important requirement with regard to security issues. However, respecting those constraints may prohibit the completion of a workflow instance in the case of the lack of authorized users. Such situation is known in the literature as a WSP (Workflow Satisfiability Problem). The ability of a WFMS to use different methods to bypass a WSP situation is often seen as a resiliency property. In this work, we propose a new approach that aims to enhance the resiliency of a WFMS while meeting -at run time- the main workflow dynamic access control requirements. In fact, by using both delegation and priority concepts it is possible to find a user which is as suitable as possible to perform the current task instance with lesser security risks. [ABSTRACT FROM AUTHOR]},
	keywords = {Access control, Computer security, Computer systems {\textendash} Research, Computer users, Delegation, Dynamic Access Control Constraints, Priority, Resiliency, Workflow management systems, Workflow Satisfiability Problem},
	issn = {09727272},
	url = {http://search.ebscohost.com/login.aspx?direct=true\&db=iih\&AN=92683712\&site=ehost-live},
	author = {Bakkali, Hanan El}
}
