Separation of Duty in Information Security

Abstract

Separation of Duty (SoD) is a fundamental security principle that ensures that critical tasks or functions are divided upon multiple users in order to prevent fraud. The topic of SoD spans over many different areas like Identity and Access Management, Workflows, Petri nets or high-level enterprise management. In this survey paper we conduct a systematic and stand-alone literature review on SoD. We develop a multi-level classification scheme and analyse the state of the art and current trends in SoD research as well as the current challenges and potential research gaps. To the best of our knowledge, this is the first effort to comprehensively survey and structure SoD literature.