Planning and verifying service composition

Journal of Computer Security

Volumn 17, Issue 5, 2009, Pages 799-837

  Bartoletti, Massimo ^a   Degano, Pierpaolo ^b   Ferrari, Gian Luigi ^b  

^a UNIVERSITY OF CAGLIARI   (Italy)

^b UNIVERSITY OF PISA   (Italy)

Author keywords

Call by contract; Language based security; Model checking; Service oriented computing; Type and effect systems; Usage policies

Indexed keywords

CALL-BY-CONTRACT; LANGUAGE-BASED SECURITY; SERVICE-ORIENTED COMPUTING; TYPE AND EFFECT SYSTEMS; USAGE POLICIES;

COMPUTER SCIENCE; LINGUISTICS; SECURITY OF DATA;

MODEL CHECKING;

EID: 70449384902     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2009-0357     Document Type: Conference Paper

References (63)

1. L. Acciai andM. Boreale, Type abstractions of name-passing processes, in: International Symposium on Fundamentals of Software Engineering, FSEN 2007, LNCS, Vol.4767, Springer, Berlin, 2007, pp. 302-317.
2. G. Alonso, F. Casati, H. Kuno and V. Machiraju, Web Services: Concepts, Architectures and Applications, Springer, Berlin, 2004.
3. S. Anderson et al., Web Services Trust Language (WS-Trust), 2005, http://specs.xmlsoap.org/ ws/2005/02/trust/WS-Trust.pdf.
4. M. Backes, S. Mödersheim, B. Pfitzmann and L. Viganò, Symbolic and cryptographic analysis of the secure ws-reliablemessaging scenario, in: Foundations of Software Science and Computation Structures, 9th International Conference, FOSSACS 2006, 2006.
5. M. Bartoletti, P. Degano and G.L. Ferrari, History based access control with local policies, in: Proc. Foundations of Software Science and Computation Structures (Fossacs), LNCS, Vol.3441, Springer, Berlin, 2005.
6. M. Bartoletti, P. Degano and G.L. Ferrari, Enforcing secure service composition, in: Proc. 18th Computer Security Foundations Workshop (CSFW), 2005
7. M. Bartoletti, P. Degano and G.L. Ferrari, Plans for service composition, in: Workshop on Issues in the Theory of Security (WITS), 2006.
8. M. Bartoletti, P. Degano and G.L. Ferrari, Planning and verifying service composition, Technical Report TR-07-102, Dip. Informatica, Univ. of Pisa, 2007, http://compass2.di.unipi.it/TR/Files/TR- 07-02.pdf.gz.
9. J.A. Bergstra and J.W. Klop, Algebra of communicating processes with abstraction, Theoretical Computer Science 37 (1985).
10. F. Besson, T. de Grenier de Latour and T. Jensen, Interfaces for stack inspection, Journal of Functional Programming 15(2) (2005).
11. K. Bhargavan, R. Corin, C. Fournet and A.D. Gordon, Secure sessions for web services, in: Proc. ACM Workshop on Secure Web Services, 2004.
12. K. Bhargavan, C. Fournet and A.D. Gordon, A semantics for web services authentication, in: Proc. ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), 2004.
13. K. Bhargavan, C. Fournet and A.D. Gordon, Verified reference implementations of WS-security protocols, in: WS-FM, LNCS, Vol.4184, Springer, Berlin, 2006.
14. B. Blanchet, An efficient cryptographic protocol verifier based on prolog rules, in: Computer Security Foundations Workshop (CSFW), 2001.
15. E. Bonelli, A. Compagnoni and E. Gunter, Typechecking safe process synchronization, in: Proc. Foundations of Global Ubiquitous Computing, ENTCS, Vol.138, 2005.
16. D. Booth et al.,Web Service Description Language (WSDL), Version 2.0, 2006, http://www.w3.org/ TR/wsdl20-primer.
17. M. Boreale et al., SCC: a Service Centered Calculus. in: WS-FM, LNCS, Vol.4184, Springer, Berlin, 2006.
18. M. Boreale, R. Bruni, R. De Nicola and M. Loreti, Sessions and pipelines for structured service programming, in: Formal Methods for Open Object-Based Distributed Systems, 10th IFIP WG 6.1 International Conference, FMOODS 2008, LNCS, Vol.5051, Springer, Berlin, 2008, pp. 19-38.
19. D. Box et al., Simple Object Access Protocol (SOAP) 1.2. W3C recommendation, 2003, http://www.w3.org/TR/soap.
20. M. Bravetti and G. Zavattaro, A foundational theory of contracts for multi-party service composition, Fundam. Inform. 89(4) (2008), 451-478.
21. A. Brogi, C. Canal and E. Pimentel, Behavioural types and component adaptation, in: Proc. Algebraic Methodology and Software Technology (AMAST), LNCS, Vol.3116, Springer, Berlin, 2004.
22. R. Bruni, I. Lanese, H.C. Melgratti and E. Tuosto, Multiparty sessions in SOC, in: Coordination Models and Languages, 10th International Conference, COORDINATION 2008, LNCS, Vol.5052, Springer, Berlin, 2008, pp. 67-82.
23. M. Carbone, K. Honda and N. Yoshida, Structured communication-centred programming for web services, in: Programming Languages and Systems, 16th European Symposium on Programming, ESOP 2007, LNCS, Vol.4421, Springer, Berlin, 2007, pp. 2-17.
24. J. Cardoso and A.P. Sheth (eds), Semantic Web Services, Processes and Applications, SemanticWeb And Beyond Computing for Human Experience, Vol.3, Springer, Berlin, 2006.
25. G. Castagna, N. Gesbert and L. Padovani, A theory of contracts for web services, in: Proceedings of the 35th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL) 2008, ACM Press, New York, NY, 2008, pp. 261-272.
26. T. Colcombet and P. Fradet, Enforcing trace properties by program transformation, in: Proc. 27th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), 2000.
27. F. Curbera, R. Khalaf, N. Mukhi, S. Tai and S. Weerawarane, The next step in web services, Communications of the ACM 46(10) (2003).
28. J. Esparza, On the decidability of model checking for several ì-calculi and Petri nets, in: Proc. 19th Int. Colloquium on Trees in Algebra and Programming, LNCS, Vol.787, Springer, Berlin, 1994.
29. G.L. Ferrari, R. Guanciale and D. Strollo, JSCL: A middleware for service coordination, in: Proc. FORTE, LNCS, Vol.4229, Springer, Berlin, 2006.
30. F.C. Gärtner, Revisiting liveness properties in the context of secure systems, in: Proc. FASec, LNCS, Vol.2629, Springer, Berlin, 2002.
31. D.K. Gifford and J.M. Lucassen, Integrating functional and imperative programming, in: ACM Conference on LISP and Functional Programming, 1986.
32. D. Gorla, M. Hennessy and V. Sassone, Security policies as membranes in systems for global computing, Logical Methods in Computer Science 1(3) (2005).
33. C. Guidi, R. Lucchi, R. Gorrieri, N. Busi and G. Zavattaro, SOCK: A calculus for service oriented computing, in: Proc. Service-Oriented Computing (ICSOC), LNCS, Vol.4294, Springer, Berlin, 2006.
34. K. Honda, V. Vansconcelos and M. Kubo, Language primitives and type discipline for structures communication-based programming, in: Proc. European Symposium on Programming Languages (ESOP), LNCS, Vol.1381, Springer, Berlin, 1998.
35. A. Igarashi and N. Kobayashi, Resource usage analysis, in: Proc. 29th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), 2002.
36. A. Keller and H. Ludwig, The WSLA framework: Specifying and monitoring service level agreements for web services, Journal of Network and Systems Management 11(1) (2003).
37. R. Khalaf, N. Mukhi and S. Weerawarana, Service oriented composition in BPEL4WS, in: Proc. World Wide Web Conference (WWW), 2003.
38. I. Lanese, F. Martins, V.T. Vasconcelos and A. Ravara, Disciplining orchestration and conversation in service-oriented computing, in: Fifth IEEE International Conference on Software Engineering and Formal Methods (SEFM 2007), IEEE Computer Society, Los Alamitos, CA, 2007, pp. 305-314.
39. A. Lapadula, R. Pugliese and F. Tiezzi, A calculus for orchestration of web services, in: Programming Languages and Systems, 16th European Symposium on Programming, ESOP 2007, LNCS, Vol.4421, Springer, Berlin, 2007, pp. 33-47.
40. A. Lapadula, R. Pugliese and F. Tiezzi, A formal account of WS-BPEL, in: Coordination Models and Languages, 10th International Conference, COORDINATION 200, LNCS, Vol.5052, Springer, Berlin, 2008, pp. 199-215.
41. A. Lazovik, M. Aiello and R. Gennari, Encoding requests to web service compositions as constraints, in: Proc. Principles and Practice of Constraint Programming (CP), LNCS, Vol.3709, Springer, Berlin, 2005.
42. K. Marriott, P.J. Stuckey and M. Sulzmann, Resource usage verification, in: Proc. Asian Programming Languages Symposium (APLAS), LNCS, Vol.2895, Springer, Berlin, 2003.
43. J. Misra, A programming model for the orchestration of web services, in: 2nd International Conference on Software Engineering and Formal Methods (SEFM 2004), 2004.
44. F. Nielson and H.R. Nielson, Type and effect systems, in: Correct System Design, LNCS, Vol.1710, Springer, Berlin, 1999, pp. 114-136.
45. OASIS Technical Commitee, UDDI Specification V3, 2000, http://uddi.org/pubs/uddi v3.html.
46. OASIS Technical Commitee, Web Services Security (WS-Security), 2006, http://docs.oasisopen. org/wss/v1.1.
47. OASISWS-BPEL Technical Commitee,Web services business process execution language, version 2.0, Technical report, TC OASIS, 2007, http://docs.oasis-open. org/wsbpel/2.0/OS.
48. OASIS WS-BPEL Technical Commitee, WS-BPEL issues list, Technical report, TC OASIS, 2008, http://www.oasis-open.org.
49. M. Papazoglou, Service-oriented computing: Concepts, characteristics and directions, in: Proc. Web Information Systems Engineering (WISE), 2003.
50. M. Papazoglou and D. Georgakopoulos, Special issue on service oriented computing, Communications of the ACM 46(10) (2003).
51. C. Peltz, Web services orchestration and choreography, IEEE Computer 36(10) (2003), 46-52.
52. F.B. Schneider, Enforceable security policies, ACM Transactions on Information and System Security (TISSEC) 3(1) (2000).
53. P. Sewell and J. Vitek, Secure composition of untrusted code: box wrappers and causality types, Journal of Computer Security 11(2) (2003).
54. C. Skalka and S. Smith, History effects and verification, in: Proc. Asian Programming Languages Symposium (APLAS), LNCS, Vol.3302, Springer, Berlin, 2004.
55. M. Stal, Web services: Beyond component-based computing, Communications of the ACM 55(10) (2002).
56. J.P. Talpin and P. Jouvelot, The type and effect discipline, Information and Computation 2(111) (1994).
57. A. Vallecillo, V. Vansconcelos and A. Ravara, Typing the behaviours of objects and components using session types, in: Proc. of FOCLASA, 2002.
58. W. Van der Aalst, A. ter Hofstede, B. Kiepuszewski and A. Barros, Workflow patterns, Distributed and Parallel Databases 14(1) (2003).
59. Vedamuthu M, et al., Web Services Policy Framework (WS-Policy), 2006, http://www.w3.org/TR/wspolicy.
60. H.T. Vieira, L. Caires and J.C. Seco, The conversation calculus: A model of service-oriented computation, in: Programming Languages and Systems, 17th European Symposium on Programming (ESOP) 2008, LNCS, Vol.4960, Springer, Berlin, 2008, pp. 269-283.
61. W. Vogels, Web services are not distributed objects, IEEE Internet Computing 7(6) (2003).
62. G. Winskel, The Formal Semantics of Programming Languages, The MIT Press, Cambridge, MA, 1993.
63. T.Y.C. Woo and S.S. Lam, A semantic model for authentication protocols, in: IEEE Symposium on Security and Privacy, 1993.