A formal model towards scientific workflow security in a cloud

摘要

Scientific workflow management systems (SWFMS) may be vulnerable in a cloud since they may have not embraced practical security solutions yet. This paper presents an approach to formal modelling of scientific workflow security in the cloud. We focus on the procedure to build secure data flows in a holistic way. This work also suggests that a whitelist approach to input validation can play a role in protecting the flows from zero-day attacks.