Choreographing Security and Performance Analysis for Web Services

Abstract

We present a novel method of assuring security and performance demands on systems based on automated analysis of UML model descriptions. Analysable content is extracted from the UML models in the form of process calculus descriptions. These are analysed to provide strong guarantees of satisfactory security and performance. The results are reflected back in the form of a modified version of the UML model which highlights points of the design which can give rise to operational difficulties. A design platform supporting the methodology, Choreographer, interoperates with state-of-the-art UML modelling tools such as Poseidon. We illustrate the approach on an example provided by our industrial partner.

SpiG4WSC: A Calculus for Secure Services Composition

“…The basic idea is to consider a services composition as a local orchestration process execution and global choreography session conversation problems. For giving a uniform understand for services orchestration, especially for orchestration and choreography [14], we have showed the previous formal research on this area [15,16,17]. By comparing the different formal methods and services composition techniques, we denote the shortcomings of the current formal methods to describe, analyze and authenticate the composite languages.…”

“…The importance of security has long been identified and addressed by academic and industrial research [4,5,7]. Due to open, distributed and on the fly properties in Web service composition, in that they are built with little or no knowledge about their operating environment, their customers, and further services therein involved.…”

“…It represents control from one principle's perspective [2,5].Choreography is more collaborative and allows each involved services to describe its part in the interaction. Choreography tracks the services message sequence among multiple parties, source and guarantee overall composition functional, non-functional aspects [3,4].…”

A design environment for mobile applications

“…This aspect of the use of Choreographer is not discussed further here. The interested reader is referred to [19,6] for further details.…”

A Formal Model for dynamic Web Services Composition MAS-Based and Simple Security Analysis Using Spi Calculus

“…In paper [5,8] discussed using aspect for security for web service composition, this paper explains the security requirement in web service composition and proposes some security policy. In paper [7] choreographing security and performance analysis for web services is presented. In paper [11] the conception about security of web services and degrees of safety for web services is presented, but it is a qualitative analysis, it has without any formal model.…”