Valued workflow satisfiability problem
by Jason Crampton, Gregory Z. Gutin, Daniel Karapetyan
Abstract:
A workflow is a collection of steps that must be executed in some specific order to achieve an objective. A computerised workflow management system may enforce authorisation policies and constraints, thereby restricting which users can perform particular steps in a workflow. The existence of policies and constraints may mean that a workflow is unsatisfiable, in the sense that it is impossible to find an authorised user for each step in the workflow and satisfy all constraints. In this paper, we consider the problem of finding the "least bad" assignment of users to workflow steps by assigning a weight to each policy and constraint violation. To this end, we introduce a framework for associating costs with the violation of workflow policies and constraints and define the valued workflow satisfiability problem (Valued WSP), whose solution is an assignment of steps to users of minimum cost. We establish the computational complexity of \vwsp with user-independent constraints and show that it is fixed-parameter tractable. We then describe an algorithm for solving Valued WSP with user-independent constraints and evaluate its performance, comparing it to that of an off-the-shelf mixed integer programming package.
Reference:
Valued workflow satisfiability problem (Jason Crampton, Gregory Z. Gutin, Daniel Karapetyan), In proc. of ACM symposium on Access control models and technologies (SACMAT), 1–3 June, Vienna, Austria, ACM, 2015.Best paper award.
Bibtex Entry:
@InProceedings{CramptonGutinKarapetyan2015,
  Title                    = {Valued workflow satisfiability problem},
  Author                   = {Crampton, Jason and Gutin, Gregory Z. and Karapetyan, Daniel},
  Booktitle                = {ACM symposium on Access control models and technologies (SACMAT), 1--3 June},
  Year                     = {2015},
  Address                  = {Vienna, Austria},
  Pages                    = {3--13},
  Publisher                = {ACM},
  Abstract                 = {A workflow is a collection of steps that must be executed in some specific order to achieve an objective.
A computerised workflow management system may enforce authorisation policies and constraints, thereby restricting which users can perform particular steps in a workflow.
The existence of policies and constraints may mean that a workflow is unsatisfiable, in the sense that it is impossible to find an authorised user for each step in the workflow and satisfy all constraints.
In this paper, we consider the problem of finding the "least bad" assignment of users to workflow steps by assigning a weight to each policy and constraint violation.
To this end, we introduce a framework for associating costs with the violation of workflow policies and constraints and define the valued workflow satisfiability problem (Valued WSP), whose solution is an assignment of steps to users of minimum cost.
We establish the computational complexity of \vwsp with user-independent constraints and show that it is fixed-parameter tractable.
We then describe an algorithm for solving Valued WSP with user-independent constraints and evaluate its performance, comparing it to that of an off-the-shelf mixed integer programming package.},
  Archiveprefix            = {arXiv},
  Arxivid                  = {1501.07814},
  Comment                  = {Best paper award [<a href="http://dx.doi.org/10.6084/m9.figshare.1367470">Source code and instance generator</a>]},
  DOI                      = {10.1145/2752952.2752961},
  Eprint                   = {1501.07814}
}