Security certification of composite services: A test-based approach

Proceedings - IEEE 20th International Conference on Web Services, ICWS 2013

Volumn , Issue , 2013, Pages 475-482

  Anisetti, Marco ^a   Ardagna, Claudio A ^a   Damiani, Ernesto ^a  

^a UNIVERSITY OF MILAN   (Italy)

Author keywords

BPEL; Model based testing; Security certification; Service composition; Web services

Indexed keywords

MODEL CHECKING; WEBSITES;

BPEL; BUSINESS PROCESS; COMPOSITE SERVICES; MODEL BASED TESTING; SECURITY CERTIFICATION; SECURITY PROPERTIES; SERVICE COMPOSITIONS; WEB SERVICE SECURITY;

WEB SERVICES;

EID: 84891823464     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2013.70     Document Type: Conference Paper

References (17)

1. E. Damiani, C. Ardagna, and N. E. Ioini, Open source systems security certification. New York, NY, USA: Springer, 2009.
2. M. Anisetti, C. Ardagna, E. Damiani, and F. Saonara, "A testbased security certification scheme for web services," ACM TWEB, 2013, (to appear).
3. D. Kourtesis, E. Ramollari, D. Dranidis, and I. Paraskakis, "Increased reliability in SOA environments through registrybased conformance testing of web services," Production Planning & Control, vol. 21, no. 2, pp. 130-144, 2010.
4. F. Kerschbaum and P. Robinson, "Security architecture for virtual organizations of business web services," Journal of Systems Architecture, vol. 55, no. 4, pp. 224-232, 2009.
5. A. Alves et al., Web Services Business Process Execution Language Version 2.0, OASIS, April 2007, http://docs.oasis-open.org/wsbpel/2.0/OS/wsbpel-v2.0- OS.html.
6. L. Frantzen, J. Tretmans, and T. Willemse, "A symbolic framework for model-based testing," in Proc. of FATES/RV 2006, Seattle, WA, USA, August 2006.
7. M. Anisetti, C. Ardagna, E. Damiani, and J. Maggesi, "Security certification-aware service discovery and selection," in Proc. of IEEE SOCA 2012, Taipei, Taiwan, December 2012.
8. A.R.R. Souza et al., "Incorporating security requirements into service composition: From modelling to execution," in Proc. of the ICSOC-ServiceWave 2009, Stockholm, Sweden, November 2009.
9. W. Tan, Y. Fan, and M. Zhou, "A petri net-based method for compatibility analysis and composition of web services in business process execution language," IEEE TASE, vol. 6, no. 1, pp. 94-106, 2009.
10. H. N. Talantikitea, D. Aissanib, and N. Boudjlidac, "Semantic annotations for web services discovery and composition," Computer Standards and Interfaces, vol. 31, no. 6, pp. 1108-1117, 2009.
11. Y. Bai, Y. Zhang, Y. Zhou, and L. T. Yang, "A non-functional property based service selection and service verification model," in Proc. of UIC 2011, Banff, Canada, September 2011.
12. K. M. Khan, A. Erradi, S. Alhazbi, and J. Han, "Security oriented service composition: A framework," in Proc. of IIT 2012, Al Ain, UAE, March 2012.
13. L. Pino and G. Spanoudakis, "Finding secure compositions of software services: Towards a pattern based approach," in Proc. of NTMS 2012, Istanbul, Turkey, May 2012.
14. R. Mateescu and S. Rampacek, "Formal modeling and discrete-time analysis of BPEL web services," in Advances in Enterprise Engineering I, ser. Lecture Notes in Business Information Processing. Springer Berlin Heidelberg, 2008, vol. 10, pp. 179-193.
15. L. Bentakouk, P. Poizat, and F. Zädi, "A formal framework for service orchestration testing based on symbolic transition systems," in Proc. of TESTCOM/FATES 2009, Eindhoven, The Netherlands, November 2009.
16. H. Gao and Y. Li, "Generating quantitative test cases for probabilistic timed web service composition," in Proc. of APSCC 2011, Jeju, Korea, December 2011.
17. M. Alrifai, T. Risse, and W. Nejdl, "A hybrid approach for efficient web service composition with end-to-end qos constraints," ACM TWEB, vol. 6, no. 2, pp. 1-31, June 2012.