Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)

Today's process-oriented composition languages such as BPEL (Business Process Execution Language) offer a high level of abstraction and sophistication to Web services composition. However, such languages suffer serious drawbacks with respect to security, modularity and adaptability. Particularl...

وصف كامل

محفوظ في:
التفاصيل البيبلوغرافية
المؤلف الرئيسي: Tout, Hanine Ahmad (author)
التنسيق: masterThesis
منشور في: 2013
الموضوعات:
الوصول للمادة أونلاين:http://hdl.handle.net/10725/2131
https://doi.org/10.26756/th.2013.43
الوسوم: إضافة وسم
لا توجد وسوم, كن أول من يضع وسما على هذه التسجيلة!
_version_ 1864513457415520256
author Tout, Hanine Ahmad
author_facet Tout, Hanine Ahmad
author_role author
dc.creator.none.fl_str_mv Tout, Hanine Ahmad
dc.date.none.fl_str_mv 2013
2013-06-06
2015-09-14T05:36:42Z
2015-09-14T05:36:42Z
2016-03-07
dc.identifier.none.fl_str_mv http://hdl.handle.net/10725/2131
https://doi.org/10.26756/th.2013.43
dc.language.none.fl_str_mv en
dc.publisher.none.fl_str_mv Lebanese American University
dc.rights.*.fl_str_mv info:eu-repo/semantics/openAccess
dc.subject.none.fl_str_mv Web services -- Security measures
BPEL (Computer program language)
Model-driven software architecture
Dissertations, Academic
Lebanese American University -- Dissertations
dc.title.none.fl_str_mv Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
dc.type.none.fl_str_mv Thesis
info:eu-repo/semantics/publishedVersion
info:eu-repo/semantics/masterThesis
description Today's process-oriented composition languages such as BPEL (Business Process Execution Language) offer a high level of abstraction and sophistication to Web services composition. However, such languages suffer serious drawbacks with respect to security, modularity and adaptability. Particularly, they lack the security features needed in distributed computational environments like Web services composition. In addition, they do not provide means for an explicit and well-modularized specification of cross-cutting concerns. They also do not support the dynamic adaptation with the environmental execution changes. In this thesis, we advocate new approach that provides systematic and model-driven security specification at the Web services composition level, in addition to dynamic integration in a seamless fashion. It is based on an extension of the BPEL meta-model with new aspect-oriented constructs for designing and building modularized, secure, conflict-free and highly adaptable Web services composition within BPEL processes. Moreover, we extend our approach by adopting security licenses in BPEL and provide process level license verification that replaces the monopolization of such validation at the Web services side. Furthermore, we introduce two different real-life case studies along with performance analysis and experimental results to demonstrate the usefulness of our proposition. Finally, we carry out a formal verification mechanism to ensure that the integration of the new security aspects does not affect the original behavior of the Web services business process, which remains deadlock and conflictfree.
eu_rights_str_mv openAccess
format masterThesis
id LAURepo_d412ea15766a9f5d8412973fc6f62fa4
language_invalid_str_mv en
network_acronym_str LAURepo
network_name_str Lebanese American University repository
oai_identifier_str oai:laur.lau.edu.lb:10725/2131
publishDate 2013
publisher.none.fl_str_mv Lebanese American University
repository.mail.fl_str_mv
repository.name.fl_str_mv
repository_id_str
spelling Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)Tout, Hanine AhmadWeb services -- Security measuresBPEL (Computer program language)Model-driven software architectureDissertations, AcademicLebanese American University -- DissertationsToday's process-oriented composition languages such as BPEL (Business Process Execution Language) offer a high level of abstraction and sophistication to Web services composition. However, such languages suffer serious drawbacks with respect to security, modularity and adaptability. Particularly, they lack the security features needed in distributed computational environments like Web services composition. In addition, they do not provide means for an explicit and well-modularized specification of cross-cutting concerns. They also do not support the dynamic adaptation with the environmental execution changes. In this thesis, we advocate new approach that provides systematic and model-driven security specification at the Web services composition level, in addition to dynamic integration in a seamless fashion. It is based on an extension of the BPEL meta-model with new aspect-oriented constructs for designing and building modularized, secure, conflict-free and highly adaptable Web services composition within BPEL processes. Moreover, we extend our approach by adopting security licenses in BPEL and provide process level license verification that replaces the monopolization of such validation at the Web services side. Furthermore, we introduce two different real-life case studies along with performance analysis and experimental results to demonstrate the usefulness of our proposition. Finally, we carry out a formal verification mechanism to ensure that the integration of the new security aspects does not affect the original behavior of the Web services business process, which remains deadlock and conflictfree.N/A1 hard copy: xvi, 106 p.; 30 cm. available at RNL.Includes bibliographical references (leaves 99-106).Lebanese American University2015-09-14T05:36:42Z2015-09-14T05:36:42Z20132016-03-072013-06-06Thesisinfo:eu-repo/semantics/publishedVersioninfo:eu-repo/semantics/masterThesishttp://hdl.handle.net/10725/2131https://doi.org/10.26756/th.2013.43eninfo:eu-repo/semantics/openAccessoai:laur.lau.edu.lb:10725/21312023-03-01T10:24:42Z
spellingShingle Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
Tout, Hanine Ahmad
Web services -- Security measures
BPEL (Computer program language)
Model-driven software architecture
Dissertations, Academic
Lebanese American University -- Dissertations
status_str publishedVersion
title Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
title_full Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
title_fullStr Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
title_full_unstemmed Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
title_short Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
title_sort Context-aware and model-driven approach for embedding and verifying security into composed web services. (c2013)
topic Web services -- Security measures
BPEL (Computer program language)
Model-driven software architecture
Dissertations, Academic
Lebanese American University -- Dissertations
url http://hdl.handle.net/10725/2131
https://doi.org/10.26756/th.2013.43