Evaluating Quality of Web Services: A Short Survey

Kondratyeva, Olga; Cavalli, Ana; Kushik, Natalia; Yevtushenko, Nina

doi:10.1109/icws.2013.83

Cited by 14 publications

(12 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The QoS is usually defined as a set of attributes or parameters, such as the response time, availability or reliability corresponding to a given Web service. [Kondratyeva et al, 2013] reviewed the works published on QoS evaluation for Web service and proposed a model based evaluation of QoS to evaluate the quality of Web services. They used weighted Finite State Machine (FSM).…”

Section: Research On Web Servicesmentioning

confidence: 99%

Attack Tolerance for Services-Based Applications in the Cloud

Ouffoué

Zaïdi

Cavalli

2019

Testing Software and Systems

View full text Add to dashboard Cite

Web services allow the communication of heterogeneous systems on the Web. These facilities make them particularly suitable for deploying in the cloud. Although research on formalization and verification has improved trust in Web services, issues such as high availability and security are not fully addressed since the solutions proposed are sometimes attack-specific. In addition, Web services deployed in cloud infrastructures inherit their vulnerabilities. For example when different tenants in a cloud platform consume the same instance of the service, attacks such as side-channel can be performed by malicious tenants. Because of this limitation, they may be unable to perform their tasks perfectly. In this thesis, we claim that a good tolerance requires attack detection and continuous monitoring on the one hand; and reliable reaction mechanisms on the other hand. We therefore proposed a new formal monitoring methodology that takes into account the risks that our services may face. To implement this methodology, we first developed an approach of attack tolerance that leverages model-level diversity. We define a model of the system and derive more robust functionally equivalent variants that can replace the first one in case of attack. To avoid manually deriving the variants and to increase the level of diversity, we proposed a second complementary approach. The latter still consists in having different variants of our services; but unlike the first, we have a single model and the implementations differ at the language, source code and binaries levels. Moreover, to ensure detection of insider attacks, we investigated a new detection and reaction mechanism based on software reflection. While the program is running, we analyze the methods to detect malicious executions. When these malicious activities are detected, using reflection again, new efficient implementations are generated as a countermeasure. Finally, we leveraged a formal Web service testing framework by incorporating these complementary mechanisms in order to take advantage of the benefits of each of them. iii Résumé Les services Web permettent la communication de systèmes hétérogènes sur le Web. Ces facilités font que ces services sont particulièrement adaptés au déploiement dans le cloud. Les efforts de formalisation et de vérification permettent d'améliorer la confiance dans les services Web, néanmoins des problèmes tels que la haute disponibilité et la sécurité ne sont pas entièrement pris en compte. Par ailleurs, les services Web déployés dans une infrastructure cloud héritent des vulnérabilités de cette dernière. En raison de cette limitation, ils peuvent être incapables d'exécuter parfaitement leurs tâches. Dans cette thèse, nous pensons qu'une bonne tolérance nécessite un monitoring constant et des mécanismes de réaction fiables. Nous avons donc proposé une nouvelle méthodologie de monitoring tenant compte des risques auxquels peuvent être confrontés nos services. Pour mettre en oeuvre cette méthodologie, nous avons d'abord développé une méthode de ...

show abstract

Section: Research On Web Servicesmentioning

confidence: 99%

Attack Tolerance for Services-Based Applications in the Cloud

Ouffoué

Zaïdi

Cavalli

2019

Testing Software and Systems

View full text Add to dashboard Cite

show abstract

“…In most papers, the extracted finite state models are used for automatic composition of services (Beek, Bucchiarone, & Gnesi, 2006) or testing and verification purposes (TienDung, Felix, & Castanet, 2010;Honghao & Ying, 2011). As mentioned in (Héam, Kouchnarenko, & Voinot, 2010;Kondratyeva, et al, 2013b), finite state models can also be helpful for more precise quality evaluation.…”

Section: Deriving a Formal Specificationmentioning

confidence: 99%

“…Therefore, self-adaptive models that can be trained are promising for user experience evaluation. Some of self-adapting models can be considered as finite state models and almost all of them rely on pre-/post conditions that can be expressed in terms of IF-THEN operator such as "if the service works fast I am rather happy with this service" (Kondratyeva et al, 2013b). Artificial intelligence techniques, such as fuzzy logic and neural networks seem to be promising for establishing correspondence between measured objective quality parameters and user satisfaction grades.…”

Section: State Model Based Qoe Evaluationmentioning

confidence: 99%

“…A decision tree can also be used for the analysis of the parameter importance for the users' satisfaction based on the difference in the QoE score between neighbor subtrees. Readers may refer to (Kondratyeva et al, 2013b) in order to find out more about other finite state models that are often used for the automatic prediction of the QoE value.…”

Section: Figure 6 the Decision Tree For The Vacation Planner Servicementioning

confidence: 99%

“…Another issue can be concerned about why the service is not attractive for some groups of users and what should be modified in order to obtain a higher profit of this service usage. This paper is an extension of (Kondratyeva, et al, 2013a;Kondratyeva, et al, 2013b) where finite state models have been considered for the QoS and QoE evaluation. The main contribution of this paper is the study how the web service quality estimation can be refined at different development steps using finite state models.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Using Finite State Models for Quality Evaluation at Web Service Development Steps

Kondratyeva

Kushik

Cavalli

et al. 2013

STSC

Self Cite

View full text Add to dashboard Cite

This paper presents a short study on evaluating the web service quality based on finite state models using the wellknown metrics of Quality of Service (QoS) and Quality of Experience (QoE). These metrics represent objective and subjective assessments. The development of any web service involves several steps and the final values of the service QoS and QoE can be essentially improved/deteriorated based on the quality reached at each development step. In this paper, five service development steps are considered: those are requirements specification, provisioning, composition, implementation, and usage and management. At each step different finite state models for refining the service quality estimation are utilized. A running example of a vacation planner service illustrates the application of finite state models to improve the accuracy of the QoS and QoE evaluation. Keywords: web service; quality of service (QoS); quality of experience (QoE); finite state models; attribute/parameter; composite service quality.

show abstract

5W+1H pattern: A perspective of systematic mapping studies and a case study on cloud software testing

Jia

Cai

et al. 2016

Journal of Systems and Software

View full text Add to dashboard Cite

A common type of study used by researchers to map out the landscape of a research topic is known as mapping study. Such a study typically begins with an exploratory search on the possible ideas of the research topic, which is often done in an unsystematic manner. Hence, the activity of formulating research questions in mapping studies is ill-defined, rendering it difficult for researchers who are new to the topic. There is a need to guide them kicking off a mapping study of an unfamiliar domain. This paper proposes a 5W+1H pattern to help investigators systematically examine a generic set of dimensions in a mapping study toward the formulation of research questions before identifying, reading, and analyzing sufficient articles of the topic. We have validated the feasibility of our proposal by conducting a case study of a mapping study on cloud software testing, that is, software testing for and on cloud computing platforms. The case study reveals that the 5W+1H pattern can lead investigators to define a set of systematic, generic, and complementary research questions, enabling them to kick off and expedite the mapping study process in a well-defined manner. We also share our experiences and lessons learned from our case study on the use of the 5W+1H pattern in mapping studies.

show abstract

Evaluating Quality of Web Services: A Short Survey

Cited by 14 publications

References 25 publications

Attack Tolerance for Services-Based Applications in the Cloud

Attack Tolerance for Services-Based Applications in the Cloud

Using Finite State Models for Quality Evaluation at Web Service Development Steps

5W+1H pattern: A perspective of systematic mapping studies and a case study on cloud software testing

Contact Info

Product

Resources

About