Sound development of secure service-based systems

ICSOC '04: Proceedings of the Second International Conference on Service Oriented Computing

Volumn , Issue , 2004, Pages 115-124

  Deubler, Martin ^a   Grünbauer, Johannes ^a   Jürjens, Jan ^a   Wimmel, Guido ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

AutoFocus; Automotive; Model based Software Engineering; Security; Service based Systems; UML

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER PROGRAMMING LANGUAGES; MATHEMATICAL MODELS; PROJECT MANAGEMENT; SECURITY OF DATA; SOFTWARE PROTOTYPING;

AUTOFOCUS; MODEL-BASED SOFTWARE ENGINEERING; SERVICE-BASED SYSTEMS; UML;

COMPUTER AIDED SOFTWARE ENGINEERING;

EID: 20444440807     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1035167.1035185     Document Type: Conference Paper

References (29)

1. R. Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems. Wiley, 2001.
2. F. Arcieri, F. Fioravanti, E. Nardelli, and M. Talamo. A Layered IT Infrastructure for Secure Interoperability in Personal Data Registry Digital Government Services. In 14th International Workshop on Research Issues on Data Engineering: Web Services for E-Commerce and E-Government Applications (RIDE'04), pages 95-102, March 2004.
3. L. Baresi, R. Heckel, S. Thüne, and D. Varró. Modeling and validation of service-oriented architectures: application vs. style. In ESEC / SIGSOFT FSE, pages 68-77. ACM, 2003.
4. M. Broy. Modeling Services and Layered Architectures. In H. König, M. Heiner, and A. Wolisz, editors, Formal Techniques for Networked and Distributed Systems, volume 2767 of Lecture Notes in Computer Science, pages 48-61. springer, 2003.
5. M. Broy, F. Huber, and B. Schätz. AutoFocus - Ein Werkzeugprototyp zur Entwicklung eingebetteter Systeme. Informatik Forschung und Entwicklung, 14(3):121-134, 1999.
6. M. Broy and K. Stølen. Specification and Development of Interactive Systems: FOCUS on Streams, Interfaces and Refinement. Springer, 2001.
7. G. Denker, L. Kagal, T. W. Finin, M. Paolucci, and K. P. Sycara. Security for DAML web services: Annotation and matchmaking. In International Semantic Web Conference, pages 335-350, 2003.
8. M. Deubler, J. Grünbauer, G. Popp, G. Wimmel, and C. Salzmann. Tool Supported Development of Service Based Systems. In 11th Asia-Pacific Software Engineering Conference (APSEC 2004), Busan, Korea, Nov.. 30-Dec. 3 2004. IEEE Computer Society.
9. M. Dwyer, G. Avrunin, and J. Corbett. Patterns in Property Specifications for Finite-State Verification. In Proc. International Conference on Software Engineering (ICSE) 1999, 1999.
10. E. A. Emerson. Temporal and modal logic. In J. van Leeuwen, editor, Handbook of Theoretical Computer Science, volume B, chapter 16, pages 995-1072. Elsevier Science Publishers, 1990.
11. P. Giorgini, F. Massacci, and J. Mylopoulos. Requirement engineering meets security: A case study on modelling secure electronic transactions by VISA and Mastercard. In I.-Y. Song, S. Liddle, T. Ling, and P. Scheuermann, editors, 22nd International Conference on Conceptual Modeling (ER 2003), volume 2813 of LNCS, pages 263-276. Springer, 2003.
12. J. Grünbauer, H. Hollmann, J. Jürjens, and G. Wimmel. Modelling and verification of layered security protocols: A bank application. In Computer Safety, Reliability, and Security (SAFECOMP 2003), volume 2788 of LNCS, pages 116-129. Springer, 2003.
13. F. Huber, S. Molterer, A. Rausch, B. Schätz, M. Sihling, and O. Slotosch. Tool supported Specification and Simulation of Distributed Systems. In International Symposium on Software Engineering for Parallel and Distributed Systems, pages 155-164, 1998.
14. ITU. ITU-TS Recommendation Z.120: Message Sequence Chart (MSC). ITU-TS, Geneva, 1996.
15. J. Jürjens. Secure Systems Development with UML. Springer, 2004.
16. J. Jürjens and G. Wimmel. Security modelling for electronic commerce: The Common Electronic Purse Specifications. In I3E 2001, pages 489-506. International Federation for Information Processing (IFIP), Kluwer Academic Publishers, 2001.
17. K. Leune, van den Heuvel, Willem-Jan, and M. Papazoglou. Exploring a Multi-Faceted Framework for SoC: How to Develop Secure Web-Service Interactions? In 14th International Workshop on Research Issues on Data Engineering: Web Services for E-Commerce and E-Government Applications (RIDE'04), Pages 56-61. IEEE Computer Society, March 2004.
18. K. L. McMillan. Symbolic Model Checking. Kluwer Academic Publishers, Boston, 1993.
19. MEWADIS Projekt Homepage MEWADIS website at http://www4.in.tum.de/~mewadis. In German.
20. Open Services Gateway Inititative. OSGi™ Service Platform Specification. Release 3, March 2003, http://www.osgi.org.
21. B. Orriëns, J. Yang, and M. P. Papazoglou. Model driven service composition. In M. E. Orlowska, S. Weerawarana, M. P. Papazoglou, and J. Yang, editors, First International Conference on Service-Oriented Computing (ICSOC 2003), volume 2910 of LNCS, pages 75-90, Trento, Italy, December 15-18 2003. Springer.
22. OSGi Alliance. OSGI World Congress 2003. http://2003.osgiworldcongress.com.
23. J. Philipps and O. Slotosch. The Quest for Correct Systems: Model Checking of Diagrams and Datatypes. In Asia Pacific Software Engineering Conference 1999, 1999.
24. H. Skogsrud, B. Benatallah, and F. Casati. Model-driven trust negotiation for web services. IEEE Internet Computing, 7(6):45-52, 2003.
25. O. Slotosch. Quest: Overview over the Project. In D. Hutter, W. Stephan, P. Traverso, and M. Ullmann, editors, Applied Formal Methods - FM-Trends 98, pages 346-350. Springer LNCS 1641, 1998.
26. S. Thompson. Haskell: The Craft of Functional Programming. Addison-Wesley Longman, 1999.
27. V. Welch, F. Siebenlist, I. T. Foster, J. Bresnahan, K. Czajkowski, J. Gawor, C. Kesselman, S. Meder, L. Pearlman, and S. Tuecke. Security for grid services. In HPDC 2003, pages 48-57, 2003.
28. G. Wimmel and J. Jürjens. Specification-Based Test Generation for Security-Critical Systems Using Mutations. In 4th International Conference on Formal Engineering Methods (ICFEM2002), 2002.
29. G. Wimmel and A. Wißpeintner. Extended description techniques for security engineering. In M. Dupuy and P. Paradinas, editors, Trusted Information: The New Decade Challenge, page 469ff. International Federation for Information Processing (IFIP), Kluwer Academic Publishers, 2001. Proceedings of SEC 2001 - 16th International Conference on Information Security.