Patent ID: 8452962

Claim:
A method for simulating a workflow and analyzing the behavior of information assurance attributes through a data providence architecture, comprising: injecting, with a processor, one or more faults into a simulated workflow; receiving, with the processor, a message in the simulated workflow having a data provenance wrapper, the message including one or more attachments and the data provenance wrapper containing a data provenance record with data provenance information for the message and each of the one or more attachments, the one or more injected faults being included in at least one of the received message, the data provenance information, and at least one of the one or more attachments; examining, with the processor, each data provenance record of the message and the one or more attachments for discrepancies, the examination of each data provenance record of the message and the one or more attachments including: verifying signatures of senders of the message and the one or more attachments; calculating a hash value for the message and the one or more attachments; verifying that the hash value for the message and the one or more attachments matches values in the data provenance record for the message and the one or more attachments; verifying a timestamp of the message and the one or more attachments; and verifying information assurance attributes of the message and the one or more attachments, the information assurance attributes being at least one of authenticity, confidentiality, integrity, non-repudiation, and availability; identifying, with the processor, discrepancies in the examination of each data provenance record of the message and the one or more attachments; calculating, with the processor, a degree of trust based on security attributes and message identification information included in the message, the data provenance record and any discrepancies identified in the examination of each data provenance record of the message and the one or more attachments; analyzing, with the processor, the calculated degree of trust with respect to the one or more injected faults and the information assurance attributes; and outputting a result of the analyzing to a user in a form that is usable by the user.