Research On Information Security Problem In Workflow Platform

With the increasing maturity of workflow technology, more and more enterprises begin to use it as a means of improving business efficiency.Workflow Management System primarily used to coordinate the implementation of business processes, these processes often involve the distributed resources. As organizations increasingly rely on the workflow management system to complete their daily work, how to protect business secrets is becoming an increasingly important problem.Most workflow systems used Web Mode, and the resources in it are too many and different in a thousand and one ways, the workflow management system presents a high security needs. Workflow management system also has dynamic characteristics, these factors make the workflow management system to solve the security problem to support the business rules for complex security system design to a difficult point.In this thesis, first we analysis workflow platform deeply, and introduced the characteristics of access control model, and in-depth analysis of the role-based access control model RBAC model through the analysis of strengths and weaknesses, position the problems in the platform, then add the constraints of permission to increase system security.Then by simulating the operation of the platform work, we can get the work log, and then model-based analysis method to examine the work of the log, check out security problems from the systemFinally, in allusion to the causes and system design, we modify the system to improve platform security purposes.