مقاله انگلیسی رایگان در مورد بهبود اجرای روند کاری موبایل توسط تزریق کنترل های امنیتی – اسپرینگر ۲۰۱۷

Mobile devices are a key part of daily life nowadays. People employ them for a wide range of activities such as surfing to the Internet, making calls (using Voice-over-IP – VoIP- technologies), and even monitoring in real time locations, biological signals and other people. Furthermore, as mobile device capabilities increases, industrial companies are also integrating mobile devices into their production systems, following the principles of the Industry 4.0 paradigm [1]. Most of the described scenarios require the definition of workflows (in an implicit or explicit way) whose execution, obviously, must support mobility. Implicit workflows are triggered by the mobile applications running into devices when a certain action is detected (for example, opening a web browser). On the other hand, explicit workflows are defined by people and the workflow execution system is explicitly requested to execute them in a certain moment. Moreover, most of these activities (workflows) require communicating with Internet-of-Things (IoT) devices, third-party cell phones, Cyber-Physical devices and production systems [2] and/or cloud-based servers which store and forward personal data and provide tailored services. Therefore, mobile devices turn into critical components when workflows are executed. In this context, mobile workflows require techniques to avoid fails during executions (e.g. dead-locks), to detect risky situations derived from the mobile nature of devices (coverage problems, battery failures, etc.), to implement an adequate management policy of personal information, and/or to guarantee a safe communication among components and devices (among other needs). In fact, core security requirements, such as the previously cited confidentiality, integrity or availability, are becoming a foremost concern in today’s life [3]. However, despite the amount of the components that could came across the execution of mobile workflows [4], these requirements are nowadays still addressed with computer science solutions (as controls in the network perimeter layer, e.g. with firewalls and VPNs; in the OS layer e.g. sandboxing, or at the application layer e.g. with antivirus), or with traditional industrial techniques [5]. Thus, there is a major challenge related to how to adapt these controls to the high dynamism and decoupled execution of mobile workflows and their computing environment. Besides, new security solutions specifically designed to address the new risk of the world wide connected society should be also proposed (for example, tourists who are monitored by their medical center in their country of origin thousands of miles away). One of the most effective manners of securing workflows and, in general, execution systems is the injection of security controls along the execution model (workflow) [6]. Security controls are evaluation points where some relevant previously defined indicators are measured. This set of indicators must be proposed in such way that they represent the security state of the workflow execution. Relevant indicators strongly depend on the application scenario; any case, security controls are countermeasures that mitigate the probability of a threat affecting a workflow execution independently of their fixed or mobile nature. Moreover, as a mobile workflow could make use of a variety of local, remote or cloud-based systems to carry out its purposes, the security controls shall be adjusted to the entire workflow lifecycle [7], from its creation to its end. This fact is especially critical during runtime, when a mobile workflow must deal with a set of constraints such as connectivity, power processing, network heterogeneity and user experience [4].