A security modeling approach for web-service-based business processes

Proceedings of the International Symposium and Workshop on Engineering of Computer Based Systems

Volumn , Issue , 2009, Pages 340-347

  Jensen, Meiko ^a   Feja, Sven ^b  

^a RUHR UNIVERSITY BOCHUM   (Germany)

^b UNIVERSITY OF KIEL   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS; MODEL DRIVEN APPROACH; NON FUNCTIONAL PROPERTIES; PROCESS MODEL; SECURITY MODEL; SECURITY MODELING; SECURITY POLICY; SECURITY PROPERTIES; SECURITY REQUIREMENTS; WEB SERVICE TECHNOLOGY; WEB-BASED BUSINESS; WORK-IN-PROGRESS; WS-BPEL; WS-SECURITYPOLICY;

ELECTRONIC COMMERCE; MAINTAINABILITY;

PROCESS MONITORING;

EID: 67650248713     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ECBS.2009.14     Document Type: Conference Paper

References (32)

1. Oracle BPEL Process Manager. Technical report, Oracle Corporation, http://www.oracle.com/technology/products/ias/bpel/index.html, 2008.
2. M. Alam, R. Breu, and M. Breu. Model driven security for Web services (MDS4WS). Proceedings of INMIC 2004. 8th International Multitopic Conference., 2004.
3. D. Basin, J. Doser, and T. Lodderstedt. Model driven security for process-oriented systems. In SACMAT '03: Proceedings of the eighth ACM symposium on Access control models and technologies, pages 100-109, New York, NY, USA, 2003. ACM.
4. R. Breu, M. Hafner, B. Weber, and A. Novak. Model Driven Security for Inter-organizational Workflows in e-Government. E-Government: Towards Electronic Democracy, Volume 3416/2005:122-133, 2005.
5. E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana. Web Services Description Language (WSDL). W3C Note, 2001.
6. D. Eastlake, J. Reagle, T. Imamura, B. Dillaway, and E. Simon. XML Encryption Syntax and Processing. W3C Recommendation, 2002.
7. S. Feja, D. Fötsch, and S. Stein. Grafische Validierungsregeln am Beispiel von EPKs. In Workshop Modellgetriebene Softwarearchitektur - Evolution, Integration und Migration (MSEIM), Lecture Notes in Informatics (LNI), 2008.
8. S. Feja, R. Herkenhöner, M. Jensen, A. Speck, H. de Meer, and J. Schwenk. Towards modeling and transformation of security requirements for service-oriented architectures. In Proceedings of the 1st EuroNF Workshop on Future Internet Architecture (EuroNF-FIA), Paris, France, 2008.
9. J. Fung and C. Yu. Getting started with BPEL4WS in WebSphere Studio. Technical report, IBM developerWorks, 2004.
10. N. Gruschka and R. Herkenhöner. WS-SecurityPolicy Decision and Enforcement for Web Service Firewalls. In Proceedings of the IEEE/IST Workshop on Monitoring, Attack Detection and Mitigation, 2006.
11. N. Gruschka, M. Jensen, and T. Dziuk. Event-Based Application of WS-SecurityPolicy on SOAP Messages. In Proceedings of the 2007 ACM Workshop on Secure Web Services, 2007.
12. M. Gudgin, M. Hadley, N. Mendelsohn, J.-J. Moreau, and H. F. Nielsen. SOAP Version 1.2 Part 1: Messaging Framework. W3C Recommendation, 2003.
13. IDS Scheer AG. IDS Scheer AG - Country Site DE: ARIS Software. http://www.ids-scheer.de/de/ARIS\-Software\-Software/7796.html. 2008-06-05.
14. M. Jensen and S. Feja. Model-Driven Integration Engineering, chapter Modellierung von Sicherheitsaspekten in orchestrierten integrierten Anwendungssystemen, pages 301-311. Leipziger Beiträge zur Informatik, Band XI, 2008.
15. D. Jordan, J. Evdemon, A. Alves, A. Arkin, S. Askary, C. Barreto, B. Bloch, F. Curbera, M. Ford, Y. Goland, A. Guizar, N. Kartha, C. K. Liu, R. Khalaf, D. Knig, M. Marin, V. Mehta, S. Thatte, D. van der Rijn, P. Yendluri, and A. Yiu. Web Services Business Process Execution Language Version 2.0 (WS-BPEL 2.0). OASIS Standard, 2007.
16. J. Juerjens. Secure Systems Development with UML. SpringerVerlag, 2003.
17. C. Kaler and A. Nadalin. Web Services Security Policy Language (WS-SecurityPolicy) 1.1. 2005.
18. G. Keller, M. Nüttgens, and A.-W. Scheer. Semantische Prozemodellierung auf der Grundlage "Ereignisgesteuerter Prozessketten (EPK)". Arbeitsbericht Heft 89, Institut für Wirtschaftsinformatik Universität Saarbrücken, 1992.
19. S. Kühne, M. Thränert, and A. Speck. Towards a methodology for orchestration and validation of cooperative ebusiness components. In M. J. Rutherford, editor, 7th GPCE Young Researcher Workshop, pages 29-34, 2005.
20. D. Lübke, T. Lüecke, K. Schneider, and J. M. Gómez. Using event-driven process chains for model-driven development of business applications. International Journal of Business Process Integration and Management (IJBPIM), 2008, to appear.
21. C. M. MacKenzie, K. Laskey, F. McCabe, P. F. Brown, and R. Metz. Reference Model for Service Oriented Architecture 1.0. OASIS Committee Specification, 2006.
22. K. Mantell. From UML to BPEL - Model Driven Architecture in a Web services world. IBM developerWorks whitepaper, 2005.
23. A. Nadalin, C. Kaler, R. Monzillo, and P. Hallam-Baker. Web Services Security: SOAP Message Security 1.1 (WS-Security 2004). 2006.
24. N. Nagaratnam, A. Nadalin, M. Hondo, M. McIntosh, and P. Austel. Business-driven application security: From modeling to managing secure applications. IBM Systems Journal, 44, 2005.
25. Y. Nakamura, M. Tatsubori, T. Imamura, and K. Ono. Model-Driven Security Based on a Web Services Security Architecture. In SCC '05: Proceedings of the 2005 IEEE International Conference on Services Computing, 2005.
26. A. Rodriguez, E. Fernandez-Medina, and M. Piattini. Towards a UML 2.0 Extension for the Modeling of Security Requirements in Business Processes. Trust and Privacy in Digital Business, Springer Lecture Notes in Computer Science, 4083/2006:51-61, 2006.
27. S. Stein and K. Ivanov. EPK nach BPEL Transformation als Voraussetzung für praktische Umsetzung einer SOA. In W.-G. Bleek, J. Raasch, and H. Zllighoven, editors, Software Engineering 2007, volume 105 of Lecture Notes in Informatics (LNI), pages 75-80, Hamburg, Germany, March 2007. Gesellschaft fr Informatik (GI).
28. S. Stein, S. Kühne, J. Drawehn, S. Feja, and W. Rotzoll. Evaluation of OrViA Framework for Model-Driven SOA Implementations: An Industrial Case Study. In 6th International Conference on Business Process Management, 2008.
29. M. Tatsubori, T. Imamura, and Y. Nakamura. Best-practice patterns and tool support for configuring secure web services messaging. In ICWS '04: Proceedings of the IEEE International Conference on Web Services, page 244, Washington, DC, USA, 2004. IEEE Computer Society.
30. The Object Management Group (OMG). MDAGuide Version 1.0.1. June 2003.
31. The Object Management Group (OMG). Business Process Modeling Notation Specification. OMG Final Adopted Specification, 2006.
32. S. Weerawarana, F. Curbera, F. Leymann, T. Storey, and D. F. Ferguson. Web Services Platform Architecture: SOAP, WSDL, WS-Policy, WS-Addressing, WS-BPEL, WS-Reliable Messaging, and More. Prentice Hall PTR, 2005.