A general method for assessment of security in complex services

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6994 LNCS, Issue , 2011, Pages 153-164

  Krautsevich, Leanid ^a   Martinelli, Fabio ^b   Yautsiukhin, Artsiom ^b  

^a UNIVERSITY OF PISA   (Italy)

^b Istituto di Informatica e Telematica   (Italy)

Author keywords

business processes; design graph; risk; security metrics; semirings; services

Indexed keywords

BUSINESS PROCESS; DESIGN GRAPH; SECURITY METRICS; SEMIRINGS; SERVICES;

INTERNET; RATING; TELECOMMUNICATION NETWORKS;

WEB SERVICES;

EID: 80054076363     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-24755-2_14     Document Type: Conference Paper

References (21)

1. Business process execution language for web services version 1.1 (2003), http://public.dhe.ibm.com/software/dw/specs/ws-bpel/ws-bpel.pdf (April 13, 2011)
2. Business process model and notation (bpmn) version 2.0 (January 2011), http://www.omg.org/spec/BPMN/2.0 (May 19, 2011)
3. Bistarelli, S., Codognet, P., Rossi, F.: Abstracting soft constraints: Framework, properties, examples. Artificial Intelligence 139, 175-211 (2002)
4. Bistarelli, S., Montanari, U., Rossi, F.: Semiring-based constraint satisfaction and optimizatio. Journal of ACM 44(2), 201-236 (1997)
5. Casola, V., Fasolino, A.R.,Mazzocca, N., Tramontana, P.: An ahp-based framework for quality and security evaluation. In: Proceedings of 12th IEEE International Conference on Computational Science and Engineering. IEEE, Los Alamitos (2009)
6. Casola, V., Mazzeo, A., Mazzocca, N., Rak, M.: A SLA evaluation methodology in Service Oriented Architectures. In: Quality of Protection, Part 3. Advances in Information Security, vol. 23, pp. 119-130. Springer, Heidelberg (2005)
7. Cheng, F., Gamarnik, D., Jengte, N., Min, W., Ramachandran, B.: Modelling operational risks in business process. Technical Report RC23872, IBM (July 2005)
8. Dewri, R., Ray, I., Ray, I., Whitley, D.: Security provisioning in pervasive environments using multi-objective optimization. In: Jajodia, S., Lopez, J. (eds.) ESORICS 2008. LNCS, vol. 5283, pp. 349-363. Springer, Heidelberg (2008)
9. Dijkstra, E.W.: A note on two problems in connexion with graphs. Numerische Mathematik 1(1), 269-271 (1959)
10. Henning, R.: Security service level agreements: quantifiable security for the enterprise? In: Proceedings of 1999 Workshop on New Security Paradigms. ACM, New York (2000)
11. Irvine, C., Levin, T.: Quality of security service. In: Proceedings of the 2000 Workshop on New Security Paradigms. ACM, New York (2000)
12. Karabulut, Y., Kerschbaum, F., Robinson, P., Massacci, F., Yautsiukhin, A.: Security and trust in it business outsourcing: a manifesto. Electronic Notes in Theoretical Computer Science 179, 47-58 (2006)
13. Krautsevich, L., Lazouski, A., Martinelli, F., Yautsiukhin, A.: Risk-based usage control for service oriented architecture. In: Proceedings of the 18th Euromicro Conference on Parallel, Distributed and Network-Based Processing. IEEE, Los Alamitos (2010)
14. Krautsevich, L., Martinelli, F., Yautsiukhin, A.: Formal approach to security metrics.: what does "more secure" mean for you? In: Proceedings of the Fourth European Conference on Software Architecture: Companion Volume. ACM, New York (2010)
15. Krautsevich, L., Martinelli, F., Yautsiukhin, A.: Formal analysis of security metrics and risk. In: Ardagna, C.A., Zhou, J. (eds.) WISTP 2011. LNCS, vol. 6633, pp. 304-319. Springer, Heidelberg (2011)
16. Massacci, F., Yautsiukhin, A.: An algorithm for the appraisal of assurance indicators for complex business processes. In: Proceedings of the 3rd Workshop on Quality of Protection. ACM, New York (2007)
17. Massacci, F., Yautsiukhin, A.: Modelling of quality of protection in outsourced business processes. In: Proceedings of the The Third International Symposium on Information Assurance and Security. IEEE, Los Alamitos (2007)
18. Jaeger, G.R.-G.M.C., Mühl, G.: QoS aggregation in web service compositions. In: Proceedings of the IEEE International Conference on e-Technology, e-Commerce and e-Service, EEE 2005 (2005)
19. Milner, R.: Communicating and Mobile Systems: the pi-Calculus. Cambridge University Press, Cambridge (1999)
20. Mohri, M.: Semiring frameworks and algorithms for shortest-distance problems. Journal of Automata, Languages and Combinatorics 7(3), 321-350 (2002)
21. Yu, T., Lin, K.-J.: A broker-based framework for qos-aware web service composition. In: Proceedings of the IEEE International Conference on e-Technology, e-Commerce and e-Service. IEEE, Los Alamitos (2005)