{"title":"Secure Workflow Development from Early Requirements Analysis","authors":"Magali Seguran, Cédric Hébert, G. Frankova","doi":"10.1109/ECOWS.2008.13","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.13","url":null,"abstract":"Requirements engineering is being increasingly adopted as a key step in the software development process and so new challenges and possibilities emerge. Designing of Web services and developing of business processes and workflows for Web services is one of the most thought challenging issues in requirements engineering. The research on Web services design is well under way, but the existing design methodologies for Web services do not address the issue of developing secure Web services, secure business processes and secure workflows. For the purpose of developing secure workflows based on the early requirements analysis, in this work, we propose a refinement methodology and a language that allows the workflow engine to automatically enforce trust and delegation requirements. Those workflows are then to be distributed; the security aspects being enforced dynamically at runtime accordingly to the identified requirements. To make the discussion more concrete, we illustrate the proposal with an e-business banking case study.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133718839","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Discrete-Events Simulation Approach for Evaluation of Service-Based Applications","authors":"Maha Driss, Y. Jamoussi, J. Jézéquel, H. Ghézala","doi":"10.1109/ECOWS.2008.19","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.19","url":null,"abstract":"One of the promises of the service-oriented architecture(SOA) is to build complex added-value services in order to enhance and extend existing ones. service-based applications(SBAs) are asked not only to perform required functionalities,but also to deliver expected level of Quality of Service (QoS). Dealing with QoS management of such distributed applications, which are executed in dynamic environments,raises the need to consider context characteristics.This paper proposes a discrete-events simulation approach which assures the evaluation of SBAs performance under different context status. The main contributions of this paper are: (i) the discrete-events modeling approach for SBAs, (ii) the context-based model for SBAs considered in the discrete-events simulation model, and (iii) the evaluation of a set of QoS metrics by simulation.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128366369","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Zhangbing Zhou, Sami Bhiri, Walid Gaaloul, M. Hauswirth
{"title":"Developing Process Mediator for Supporting Mediated Web Service Interactions","authors":"Zhangbing Zhou, Sami Bhiri, Walid Gaaloul, M. Hauswirth","doi":"10.1109/ECOWS.2008.10","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.10","url":null,"abstract":"Web service interactions lie in the core of service oriented architecture. Due to the inherent autonomy, heterogeneity and continuous evolution of Web services, mediators are often needed to support service interactions to overcome possible mismatches existing among Web service based business processes. This paper introduces a space based process mediator which considers both control-flow and data-flow, presents possible mismatch patterns, and discusses how they can be automatically mediated. Our process mediator can address not only all mismatch patterns prescribed by existing process mediators, but also new mismatch patterns related to data-flow. In addition, our process mediator provides a uniform mechanism to perform runtime mediation without the need of a design-time work, and greatly facilitates Web service interactions.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133690383","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
V. Onditi, G. Dobson, J. Hutchinson, J. Walkerdine, P. Sawyer
{"title":"Specifying and Constructing a Fault-Tolerant Composite Service","authors":"V. Onditi, G. Dobson, J. Hutchinson, J. Walkerdine, P. Sawyer","doi":"10.1109/ECOWS.2008.26","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.26","url":null,"abstract":"This paper proposes a means to specify the semantics of fault tolerant Web services at an abstract level using semantics adapted from queuing system theory. A framework that supports the implementation of specified fault-tolerance is also described. Based on our work, we show how the redundancy and diversity characteristics of a service-oriented system can be expressed and implemented in a Web-service application.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123732516","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Integrating a Decentralized Web Service Discovery System into the Internet Infrastructure","authors":"Stephan Pöhlsen, Carsten Buschmann, C. Werner","doi":"10.1109/ECOWS.2008.15","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.15","url":null,"abstract":"A weak point of web services is the lack of suitable technologies for implementing service registries. Universal description, discovery and integration (UDDI), as a centralized approach, conflicts with the distributed nature of service-oriented architectures and did not prevail in practice. Hence, in this paper we propose an architecture for discovering and locating web services using the domain name system (DNS). After a detailed survey on current technologies for finding services we present a novel service discovery scheme that is easy to implement and scalable at the same time. Each service provider runs one or more discovery proxies in its Internet domain and sets DNS records pointing to them. Then, local services can register at these proxies. Service users from the local network as well as from the Internet can now locate these proxies using the DNS and query them for available services in this domain. Thus, the local proxies are linked together by the DNS forming one coherent global service directory.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124673003","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Ruokonen, V. Räisänen, Mika Siikarla, K. Koskimies, Tarja Systä
{"title":"Variation Needs in Service-Based Systems","authors":"A. Ruokonen, V. Räisänen, Mika Siikarla, K. Koskimies, Tarja Systä","doi":"10.1109/ECOWS.2008.22","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.22","url":null,"abstract":"Even though service-orientation has been widely applied, there still is a lack of systematic and tool independent development methods. Partly due to that, little attention has been paid to accounting for variation. When developing a service-based system, it is important to identify which types of variation are relevant for the project and when is the right time to model them. If the variation needs are not recognized or they are ignored, it may hinder applicability and reuse and results in inflexible systems. If they are considered too late, it may require a lot of redecisions and rework. In this paper we explore variation needs in terms of the development process of service-based systems. This study results in a categorization of variation in service-based systems. We illustrate the categorization in a small example in telecommunication area.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"85 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127203083","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Lars Johnsrud, D. Hadzic, T. Hafsoe, F. T. Johnsen, K. Lund
{"title":"Efficient Web Services in Mobile Networks","authors":"Lars Johnsrud, D. Hadzic, T. Hafsoe, F. T. Johnsen, K. Lund","doi":"10.1109/ECOWS.2008.24","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.24","url":null,"abstract":"Efficient solutions for Web services on mobile devices would allow truly global, platform independent, and interoperable information access, anywhere and at any time. While Web services are continuously gaining ground, they are commonly reserved for use on personal computers and high-capacity servers. However, mobile devices are gradually becoming more advanced in terms of processing resources and wireless communication capabilities, making it feasible to use Web services on such devices as well. Some of the challenges related to mobile Web services are limited bandwidth, high communication latency and high communication cost. In this paper, we focus on techniques for reducing XML overhead as a solution to overcome these challenges. Compression is a well known technique for reducing bandwidth consumption. Our contribution is an evaluation of compression techniques for use with Web services in mobile networks. In addition to performing simulations, we have verified our results using real GPRS and UMTS network connections.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133915645","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Service Based Approach to a New Generation of Intrusion Detection Systems","authors":"A. Bosin, N. Dessì, B. Pes","doi":"10.1109/ECOWS.2008.16","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.16","url":null,"abstract":"Intrusion detection systems (IDSs) aim at detecting malicious or unauthorized activities targeting a network and its resources. Usually engineered as self-contained applications, current IDSs are limited in protecting collaborative computing environments, like grids, whose security amplifies the concerns about intrusions and motivates advanced organizing paradigms and technical solutions for effective attack detection. We envision a new generation of IDSs defined by a set of services supporting security managers in improving the overall network security. Specifically, we show how to model the ID processes as a set of plans that a security manager may go through on a network of cooperative nodes interacting with one another in order to offer or to ask for services. Services correspond to specialized ID tasks and encapsulate problem solving and simulation capabilities. Complex ID activities are expressed by workflows, the focus being on flexibility, reuse and interoperability of ID services. Some implementation hints are suggested.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114171052","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Service Adaptation Machine","authors":"Kenneth Wang, M. Dumas, C. Ouyang, J. Vayssière","doi":"10.1109/ECOWS.2008.23","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.23","url":null,"abstract":"The reuse of software services often requires the introduction of adapters. In the case of coarse-grained services, and especially services that engage in long-running conversations, these adapters must deal not only with mismatches at the level of individual interactions, but also across interdependent interactions. Existing techniques support the synthesis of adapters at design-time by comparing pairs of service interfaces. However, these techniques only work under certain restrictions. This paper explores a runtime approach to service interface adaptation. The paper proposes an adaptation machine that sits between pairs of services and manipulates the exchanged messages according to a repository of mapping rules. The paper formulates an operational semantics for the adaptation machine, including algorithms to compute rule firing sequences and criteria for detecting deadlocks and information loss. The adaptation machine has been implemented as a prototype and tested on common business processes.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121833179","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Design and Implementation of Information Flow-sensitive Business Processes","authors":"U. Yildiz, C. Godart","doi":"10.1109/ECOWS.2008.8","DOIUrl":"https://doi.org/10.1109/ECOWS.2008.8","url":null,"abstract":"Information flow control consists of planning the interactions of services in order to satisfy different security restrictions concerning the propagation of information in a composition. This paper examines the questions of what the information flow is and how it can be modeled and controlled in service-oriented business processes. We present the design and implementation of a decentralized workflow management solution for the control of information flow. Our contribution targets orchestration-based compositions where centralized workflow descriptions are used to derive distributed and cooperating process fragments. The derived process fragments are deployed on composed services and they enable them to establish P2P interconnections with each other. The deriving operation is governed by the underlying dependencies of composed services and the computation of information flow policies. We present a framework for the modeling and computation of information flow and centralized specifications in order to derive cooperating process fragments. Furthermore, we present a reference architecture for service implementation. The former can be applied to a variety of composition specifications such as WS-BPEL while the latter provides an inexpensive and reasonable support for decentralized workflow management.","PeriodicalId":227761,"journal":{"name":"2008 Sixth European Conference on Web Services","volume":"56 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128615853","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}