Domain-Specific Multi-modeling of Security Concerns in Service-Oriented Architectures

Abstract

Abstract. As a common reference for many in-development standards and execution frameworks, special attention is being paid to ServiceOriented Architectures. SOAs modeling, however, is an área in which a consensus has not being achieved. Currently, standardization organizations are defining proposals to offer a solution to this problem. Nevertheless, until very recently, non-functional aspects of services have not been considered for standardization processes. In particular, there exists a lack of a design solution that permits an independent development of the functional and non-functional concerns of SOAs, allowing that each concern be addressed in a convenient manner in early stages of the development, in a way that could guarantee the quality of this type of systems. This paper, leveraging on previous work, presents an approach to intégrate security-related non-functional aspects (such as confidentiality, integrity, and access control) in the development of services.

Estrategia Guiada por Modelos para incluir Aspectos de Seguridad en Sistemas Empotrados Basados en Servicios Web

“…Los elementos correspondientes a los descriptores WSDL y WS-Policy del ejem-plo presentado no serán incluidos en este artículo. El lector puede referirse a [Silva Gallino et al (2011b)] para una presentación de la generación de los distintos artefactos de configuración para un caso de uso de servicos de cadena de suministros.…”