首页 > 最新文献

2013 IEEE Ninth World Congress on Services最新文献

英文 中文
Towards a Forensic-Based Service Oriented Architecture Framework for Auditing of Cloud Logs 基于取证的面向服务的云日志审计架构框架
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.76
Sean S. E. Thorpe, Tyrone Grandison, Arnett Campbell, Janet Williams, K. Burrell, I. Ray
Cloud computing log digital investigations relate to the investigation of a potential crime using the digital forensic evidence from a virtual machine (VM) host operating system using the hypervisor event logs. In cloud digital log forensics, work on the forensic reconstruction of evidence on VM hosts system is required, but with the heterogeneous complexity involved with an enterprise's private cloud not to mention public cloud distributed environments, a possible Web Services-centric approach may be required for such log supported investigations. A data cloud log forensics service oriented architecture (SOA) audit framework for this type of forensic examination needs to allow for the reconstruction of transactions spanning multiple VM hosts, platforms and applications. This paper explores the requirements of a cloud log forensics SOA framework for performing effective digital investigation examinations in these abstract web services environments. This framework will be necessary in order to develop investigative and forensic auditing tools and techniques for use in cloud based log-centric SOAs.
云计算日志数字调查涉及使用来自虚拟机(VM)主机操作系统的数字取证证据,使用管理程序事件日志对潜在犯罪进行调查。在云数字日志取证中,需要对VM主机系统上的证据进行取证重建,但是由于企业私有云(更不用说公共云分布式环境)的异构复杂性,可能需要一种以Web服务为中心的方法来进行此类日志支持的调查。用于此类取证检查的数据云日志取证面向服务的体系结构(SOA)审计框架需要允许跨多个VM主机、平台和应用程序重建事务。本文探讨了云日志取证SOA框架在这些抽象web服务环境中执行有效数字调查检查的需求。为了开发在基于云的以日志为中心的soa中使用的调查和取证审计工具和技术,这个框架是必要的。
{"title":"Towards a Forensic-Based Service Oriented Architecture Framework for Auditing of Cloud Logs","authors":"Sean S. E. Thorpe, Tyrone Grandison, Arnett Campbell, Janet Williams, K. Burrell, I. Ray","doi":"10.1109/SERVICES.2013.76","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.76","url":null,"abstract":"Cloud computing log digital investigations relate to the investigation of a potential crime using the digital forensic evidence from a virtual machine (VM) host operating system using the hypervisor event logs. In cloud digital log forensics, work on the forensic reconstruction of evidence on VM hosts system is required, but with the heterogeneous complexity involved with an enterprise's private cloud not to mention public cloud distributed environments, a possible Web Services-centric approach may be required for such log supported investigations. A data cloud log forensics service oriented architecture (SOA) audit framework for this type of forensic examination needs to allow for the reconstruction of transactions spanning multiple VM hosts, platforms and applications. This paper explores the requirements of a cloud log forensics SOA framework for performing effective digital investigation examinations in these abstract web services environments. This framework will be necessary in order to develop investigative and forensic auditing tools and techniques for use in cloud based log-centric SOAs.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117067069","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 29
Bridging VisTrails Scientific Workflow Management System to High Performance Computing 桥接VisTrails科学工作流管理系统到高性能计算
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.64
Jia Zhang, P. Votava, Tsengdar J. Lee, Owen Chu, Clyde Li, David Liu, K. Liu, Norman Xin, R. Nemani
NASA Earth Exchange (NEX) is a collaboration platform whose goal is to accelerate Earth science research, by leveraging NASA's vast collections of global satellite data together with access to NASA's High-End Computing (HEC) facilities. NEX also aims to facilitate the sharing of experimental results as well as scientific processes (workflows) with the Earth science community through integration with VisTrails workflow management system. While VisTrails is used internally, it is not easily accessible from remote computers without directly logging into the NASA HEC systems through twofactor authentication and a bastion host. This paper describes the initial design of an extensible architecture that facilitates easier workflow interaction on NEX, by enabling users to develop and execute workflows in a supercomputing environment directly from their local VisTrails installation. This architecture helps domain scientists seamlessly leverage distributed computing and storage resources and it is potentially applicable to other scientific workflow management software. We further describe the architecture of the VisTrails-HEC plugin (as well as the VisTrails-Amazon plugin) and the implementation of a working prototype to demonstrate the feasibility of our solution.
NASA地球交换(NEX)是一个协作平台,其目标是通过利用NASA庞大的全球卫星数据集合以及访问NASA的高端计算(HEC)设施来加速地球科学研究。NEX还旨在通过与VisTrails工作流程管理系统集成,促进与地球科学界共享实验结果以及科学过程(工作流程)。虽然VisTrails在内部使用,但如果不通过双因素认证和堡垒主机直接登录到NASA HEC系统,则不容易从远程计算机访问它。本文描述了一个可扩展体系结构的初始设计,使用户能够直接从本地VisTrails安装中在超级计算环境中开发和执行工作流,从而简化了NEX上的工作流交互。该体系结构可以帮助领域科学家无缝地利用分布式计算和存储资源,并且可能适用于其他科学工作流管理软件。我们进一步描述了VisTrails-HEC插件的架构(以及VisTrails-Amazon插件)和一个工作原型的实现,以证明我们的解决方案的可行性。
{"title":"Bridging VisTrails Scientific Workflow Management System to High Performance Computing","authors":"Jia Zhang, P. Votava, Tsengdar J. Lee, Owen Chu, Clyde Li, David Liu, K. Liu, Norman Xin, R. Nemani","doi":"10.1109/SERVICES.2013.64","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.64","url":null,"abstract":"NASA Earth Exchange (NEX) is a collaboration platform whose goal is to accelerate Earth science research, by leveraging NASA's vast collections of global satellite data together with access to NASA's High-End Computing (HEC) facilities. NEX also aims to facilitate the sharing of experimental results as well as scientific processes (workflows) with the Earth science community through integration with VisTrails workflow management system. While VisTrails is used internally, it is not easily accessible from remote computers without directly logging into the NASA HEC systems through twofactor authentication and a bastion host. This paper describes the initial design of an extensible architecture that facilitates easier workflow interaction on NEX, by enabling users to develop and execute workflows in a supercomputing environment directly from their local VisTrails installation. This architecture helps domain scientists seamlessly leverage distributed computing and storage resources and it is potentially applicable to other scientific workflow management software. We further describe the architecture of the VisTrails-HEC plugin (as well as the VisTrails-Amazon plugin) and the implementation of a working prototype to demonstrate the feasibility of our solution.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"108 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115657547","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
Parallel Matrix Multiplication Algorithm Based on Vector Linear Combination Using MapReduce 基于MapReduce的向量线性组合的并行矩阵乘法算法
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.67
Jianhua Zheng, Liang-Jie Zhang, Rong Zhu, Ke Ning, Dong Liu
Matrix multiplication is used in a variety of applications. It requires a lot of computation time especially for large-scale matrices. Parallel processing is a good choice for matrix multiplication operation. To overcome the efficiencies of existing algorithms for parallel matrix multiplication, a matrix multiplication processing scheme based on vector linear combination (VLC) was presented. The VLC scheme splits the matrix multiplication procedure into two steps. The first step obtains the weighted vectors by scalar multiplication. The second step gets the final result through a linear combination of the weighted vectors with identical row numbers. We present parallel matrix multiplication implementations using MapReduce (MR) based on VLC scheme and explain in detail the MR job. The map method receives the matrix input and generates intermediate (key, value) pairs according to the VLC scheme requirement. The reduce method conducts the scalar multiplication and vectors summation. In the end, the reduce method outputs the result in the way of row vector. Then performance theoretical analysis and experiment result comparing with other algorithms are proposed. Algorithm presented in this paper needs less computation time than other algorithms. Finally, we conclude the paper and propose future works.
矩阵乘法被用于各种各样的应用中。它需要大量的计算时间,特别是对于大规模的矩阵。并行处理是矩阵乘法运算的一个很好的选择。为了克服现有并行矩阵乘法算法的效率问题,提出了一种基于向量线性组合(VLC)的矩阵乘法处理方案。VLC方案将矩阵乘法过程分为两步。第一步通过标量乘法得到加权向量。第二步通过具有相同行号的加权向量的线性组合获得最终结果。提出了基于VLC方案的MapReduce (MR)并行矩阵乘法实现,并详细解释了MR的工作。map方法接收矩阵输入,根据VLC方案要求生成中间(键、值)对。约简法进行标量乘法和向量求和。最后,reduce方法以行向量的方式输出结果。然后给出了性能理论分析和与其他算法比较的实验结果。与其他算法相比,本文算法的计算时间更少。最后,对全文进行总结,并对后续工作提出建议。
{"title":"Parallel Matrix Multiplication Algorithm Based on Vector Linear Combination Using MapReduce","authors":"Jianhua Zheng, Liang-Jie Zhang, Rong Zhu, Ke Ning, Dong Liu","doi":"10.1109/SERVICES.2013.67","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.67","url":null,"abstract":"Matrix multiplication is used in a variety of applications. It requires a lot of computation time especially for large-scale matrices. Parallel processing is a good choice for matrix multiplication operation. To overcome the efficiencies of existing algorithms for parallel matrix multiplication, a matrix multiplication processing scheme based on vector linear combination (VLC) was presented. The VLC scheme splits the matrix multiplication procedure into two steps. The first step obtains the weighted vectors by scalar multiplication. The second step gets the final result through a linear combination of the weighted vectors with identical row numbers. We present parallel matrix multiplication implementations using MapReduce (MR) based on VLC scheme and explain in detail the MR job. The map method receives the matrix input and generates intermediate (key, value) pairs according to the VLC scheme requirement. The reduce method conducts the scalar multiplication and vectors summation. In the end, the reduce method outputs the result in the way of row vector. Then performance theoretical analysis and experiment result comparing with other algorithms are proposed. Algorithm presented in this paper needs less computation time than other algorithms. Finally, we conclude the paper and propose future works.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"253 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115007798","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Bringing Common Criteria Certification to Web Services 将通用标准认证引入Web服务
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.17
Samuel Paul Kaluvuri, M. Bezzi, Y. Roudier
Solutions based on service-oriented architecture are gaining popularity. However a wider adoption, especially for business critical functions, is hampered by the trust deficit that exists between consumers and providers, as consumers are shielded from the service architectures and the operation of the service itself. Security certification can be used as a means to bridge this trust deficit. Common Criteria for Information Technology Evaluation (CC) is a widely recognized and used security certification scheme. However, the CC scheme was tailored to provide assurance for traditional software provisioning models and hence cannot be applied to SOA solutions as is. In this paper, we present the limitations of the CC scheme when applied in SOA, the challenges that must be overcome for its adoption and possible directions through which some of those challenges can be met. In particular, we point out that CC scheme should be extended to allow for dynamic evaluation of deployed systems (which includes the operational environment) and for handling assurance of composite services.
基于面向服务的体系结构的解决方案越来越受欢迎。然而,由于消费者不受服务体系结构和服务本身的操作的影响,消费者和提供者之间存在信任赤字,从而阻碍了更广泛的采用,特别是对于业务关键功能。安全认证可以作为弥补这种信任缺陷的一种手段。CC (Common Criteria for Information Technology Evaluation)是一种被广泛认可和使用的安全认证方案。然而,CC方案是为传统的软件供应模型提供保证而定制的,因此不能按原样应用于SOA解决方案。在本文中,我们介绍了在SOA中应用CC模式时的局限性、采用CC模式必须克服的挑战,以及应对其中一些挑战的可能方向。特别地,我们指出CC方案应该扩展到允许对部署的系统(包括操作环境)进行动态评估,并处理复合服务的保证。
{"title":"Bringing Common Criteria Certification to Web Services","authors":"Samuel Paul Kaluvuri, M. Bezzi, Y. Roudier","doi":"10.1109/SERVICES.2013.17","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.17","url":null,"abstract":"Solutions based on service-oriented architecture are gaining popularity. However a wider adoption, especially for business critical functions, is hampered by the trust deficit that exists between consumers and providers, as consumers are shielded from the service architectures and the operation of the service itself. Security certification can be used as a means to bridge this trust deficit. Common Criteria for Information Technology Evaluation (CC) is a widely recognized and used security certification scheme. However, the CC scheme was tailored to provide assurance for traditional software provisioning models and hence cannot be applied to SOA solutions as is. In this paper, we present the limitations of the CC scheme when applied in SOA, the challenges that must be overcome for its adoption and possible directions through which some of those challenges can be met. In particular, we point out that CC scheme should be extended to allow for dynamic evaluation of deployed systems (which includes the operational environment) and for handling assurance of composite services.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"19 3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129889683","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Enhanced Ant Colony Algorithm for Cost-Aware Data-Intensive Service Provision 基于成本感知的数据密集型服务提供的改进蚁群算法
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.48
Lijuan Wang, Jun Shen, G. Beydoun
Huge collections of data have been created in recent years. Cloud computing has been widely accepted as the next-generation solution to addressing data-proliferation problems. Because of the explosion in digital data and the distributed nature of the cloud, as well as the increasingly large number of providers in the market, providing efficient cost models for composing data-intensive services will become central to this dynamic market. The location of users, service composers, service providers, and data providers will affect the total cost of service provision. Different providers will need to make decisions about how to price and pay for resources. Each of them wants to maximize its profit as well as retain its position in the marketplace. Based on our earlier work, this paper addresses the effect of data intensity and the communication cost of mass data transfer on service composition, and proposes a service selection algorithm based on an enhanced ant colony system for data-intensive service provision. In this paper, the data-intensive service composition problem is modeled as an AND/OR graph, which is not only able to deal with sequence relations and switch relations, but is also able to deal with parallel relations between services. In addition, the performance of the service selection algorithm is evaluated by simulations.
近年来产生了大量的数据。云计算已被广泛接受为解决数据扩散问题的下一代解决方案。由于数字数据的爆炸式增长和云的分布式特性,以及市场上越来越多的提供商,为组成数据密集型服务提供有效的成本模型将成为这个动态市场的核心。用户、服务创建者、服务提供者和数据提供者的位置将影响服务提供的总成本。不同的供应商将需要就如何定价和支付资源做出决定。他们每个人都想最大化自己的利润,并保持自己在市场上的地位。在前人研究的基础上,研究了数据强度和海量数据传输的通信成本对服务构成的影响,提出了一种基于增强蚁群系统的数据密集型服务选择算法。本文将数据密集型服务组合问题建模为AND/OR图,不仅能够处理序列关系和切换关系,还能够处理服务之间的并行关系。此外,通过仿真对服务选择算法的性能进行了评价。
{"title":"Enhanced Ant Colony Algorithm for Cost-Aware Data-Intensive Service Provision","authors":"Lijuan Wang, Jun Shen, G. Beydoun","doi":"10.1109/SERVICES.2013.48","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.48","url":null,"abstract":"Huge collections of data have been created in recent years. Cloud computing has been widely accepted as the next-generation solution to addressing data-proliferation problems. Because of the explosion in digital data and the distributed nature of the cloud, as well as the increasingly large number of providers in the market, providing efficient cost models for composing data-intensive services will become central to this dynamic market. The location of users, service composers, service providers, and data providers will affect the total cost of service provision. Different providers will need to make decisions about how to price and pay for resources. Each of them wants to maximize its profit as well as retain its position in the marketplace. Based on our earlier work, this paper addresses the effect of data intensity and the communication cost of mass data transfer on service composition, and proposes a service selection algorithm based on an enhanced ant colony system for data-intensive service provision. In this paper, the data-intensive service composition problem is modeled as an AND/OR graph, which is not only able to deal with sequence relations and switch relations, but is also able to deal with parallel relations between services. In addition, the performance of the service selection algorithm is evaluated by simulations.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"79 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132093295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 25
Pattern-Based Deployment Service for Next Generation Clouds 下一代云的基于模式的部署服务
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.54
Hongbin Lu, Mark Shtern, B. Simmons, Michael Smit, Marin Litoiu
This paper presents a flexible deployment service for cloud computing. The service facilitates the specification and the execution of cloud deployment plans for applications. An application is described through a pattern, an abstract view that captures the logical view of the application and its mapping into cloud resources. The services instantiate the pattern in the cloud and allows for runtime updates of the deployment. The service is accessible through a RESTful interface. We identify the requirements for the service, describe its interfaces and show several case studies that capture the main features of the service.
提出了一种面向云计算的灵活部署服务。该服务简化了应用程序的云部署计划的规范和执行。应用程序是通过模式来描述的,模式是一个抽象视图,它捕获应用程序的逻辑视图及其到云资源的映射。服务在云中实例化模式,并允许对部署进行运行时更新。该服务可通过RESTful接口访问。我们确定了服务的需求,描述了它的接口,并展示了几个捕获服务主要特性的案例研究。
{"title":"Pattern-Based Deployment Service for Next Generation Clouds","authors":"Hongbin Lu, Mark Shtern, B. Simmons, Michael Smit, Marin Litoiu","doi":"10.1109/SERVICES.2013.54","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.54","url":null,"abstract":"This paper presents a flexible deployment service for cloud computing. The service facilitates the specification and the execution of cloud deployment plans for applications. An application is described through a pattern, an abstract view that captures the logical view of the application and its mapping into cloud resources. The services instantiate the pattern in the cloud and allows for runtime updates of the deployment. The service is accessible through a RESTful interface. We identify the requirements for the service, describe its interfaces and show several case studies that capture the main features of the service.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130049674","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 31
HRPaaS: A Handwriting Recognition Platform as a Service  Based on Middleware and the HTTP API HRPaaS:基于中间件和HTTP API的手写识别平台即服务
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.80
Desheng Li, Lianwen Jin, Yin Zhang
In this paper, we present a new Handwriting Recognition Platform as a Service (HRPaaS) using cloud infrastructure as a service(IaaS), middleware, and HTTP application programming interface (API) technologies. Based on the OpenStack cloud IaaS architecture, a handwriting recognition HTTPAPI service is designed to provide a highly reliable, real-time, customized handwriting character recognition service for application developers. Using middleware and cloud computing technologies, the computing resources, HTTPAPI response service pool, and backend handwriting recognition service pool can be loosely coupled and integrated to achieve fast and flexible deployment of the HRPaaS.
在本文中,我们提出了一种新的手写识别平台即服务(HRPaaS),使用云基础设施即服务(IaaS)、中间件和HTTP应用程序编程接口(API)技术。基于OpenStack云IaaS架构的手写字符识别httpi服务,旨在为应用开发者提供高可靠、实时、个性化的手写字符识别服务。通过中间件和云计算技术,将计算资源、httpi响应服务池和后端手写识别服务池进行松耦合集成,实现HRPaaS的快速灵活部署。
{"title":"HRPaaS: A Handwriting Recognition Platform as a Service  Based on Middleware and the HTTP API","authors":"Desheng Li, Lianwen Jin, Yin Zhang","doi":"10.1109/SERVICES.2013.80","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.80","url":null,"abstract":"In this paper, we present a new Handwriting Recognition Platform as a Service (HRPaaS) using cloud infrastructure as a service(IaaS), middleware, and HTTP application programming interface (API) technologies. Based on the OpenStack cloud IaaS architecture, a handwriting recognition HTTPAPI service is designed to provide a highly reliable, real-time, customized handwriting character recognition service for application developers. Using middleware and cloud computing technologies, the computing resources, HTTPAPI response service pool, and backend handwriting recognition service pool can be loosely coupled and integrated to achieve fast and flexible deployment of the HRPaaS.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"97 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114281985","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Managing End-to-End Security Risks with Fuzzy Logic in Service-Oriented Architectures 在面向服务的体系结构中用模糊逻辑管理端到端安全风险
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.28
Y. Badr, S. Banerjee
Service-oriented architectures are increasingly deployed in open, distributed and dynamic environments, which require an end-to-end security awareness security at each phase of the service's lifecycle. Moreover, the security should not only focus on services without considering the risks and threats that might be caused by elements from business activities or underlying hardware and software infrastructure. In this paper, we adopt a holistic approach to define a security conceptual model that covers all elements at the business, service and infrastructure levels and guides each phase in a typical design method for service-oriented architectures. Since the information security is subject to uncertain and unforeseen threats, we propose a fuzzy logic decision system that helps identify security risks based on the security conceptual model and select appropriate security measures based on security objectives.
面向服务的体系结构越来越多地部署在开放、分布式和动态的环境中,这些环境要求在服务生命周期的每个阶段都具有端到端的安全意识。此外,安全性不应只关注服务,而不考虑业务活动元素或底层硬件和软件基础设施可能引起的风险和威胁。在本文中,我们采用一种整体方法来定义一个安全概念模型,该模型涵盖了业务、服务和基础设施级别的所有元素,并以面向服务的体系结构的典型设计方法指导每个阶段。由于信息安全受到不确定和不可预见的威胁,我们提出了一种模糊逻辑决策系统,它有助于基于安全概念模型识别安全风险,并根据安全目标选择适当的安全措施。
{"title":"Managing End-to-End Security Risks with Fuzzy Logic in Service-Oriented Architectures","authors":"Y. Badr, S. Banerjee","doi":"10.1109/SERVICES.2013.28","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.28","url":null,"abstract":"Service-oriented architectures are increasingly deployed in open, distributed and dynamic environments, which require an end-to-end security awareness security at each phase of the service's lifecycle. Moreover, the security should not only focus on services without considering the risks and threats that might be caused by elements from business activities or underlying hardware and software infrastructure. In this paper, we adopt a holistic approach to define a security conceptual model that covers all elements at the business, service and infrastructure levels and guides each phase in a typical design method for service-oriented architectures. Since the information security is subject to uncertain and unforeseen threats, we propose a fuzzy logic decision system that helps identify security risks based on the security conceptual model and select appropriate security measures based on security objectives.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"162 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114639799","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Workflow Operational Assurance Platform for Security-by-Design Certified Service-Based Coalitions 基于设计的安全认证服务联盟的工作流操作保证平台
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.14
Javier Espinar, A. Maña, Hristo Koshutanski
The concept of Dynamic Coalitions (DCs) provides a scalable approach for service-based business integration suitable to Small and Medium-size Enterprises (SMEs). An outcome of a DC model is a composite service offered to a market place. The notion of security-by-design certified coalition enables coalition designers/owners to request a certification authority to certify whether the coalition workflow design supports certain security properties of interest by stipulating the security properties individual services have to conform to. This paper presents an approach based on a novel Highly Dynamic Coalition (HDC) concept able to provide workflow operation assurance for security-by-design certified service-based coalitions. Certified HDC models can become an enabler for SMEs to participate in coalition formations guaranteeing a certified level of security. Users of HDC-based services will have assurance for the properties preserved during coalition operation, while service providers will have assurance in providing services during HDC formations and partners' selection phases. We will show how workflow operation assurance is realized by means of service security certificates developed in ASSERT4SOA project.
动态联盟(dc)的概念为适合中小型企业的基于服务的业务集成提供了一种可伸缩的方法。DC模型的结果是提供给市场的组合服务。基于设计的安全认证联盟的概念使联盟设计者/所有者能够通过规定各个服务必须遵守的安全属性来请求认证机构来证明联盟工作流设计是否支持感兴趣的某些安全属性。本文提出了一种基于新型高动态联盟(HDC)概念的方法,该方法能够为设计安全认证的基于服务的联盟提供工作流操作保证。认证的HDC模型可以成为中小企业参与保证认证安全级别的联盟的推动者。基于HDC的服务的用户将在联合作业期间确保财产的保护,而服务提供商将在HDC地层和合作伙伴选择阶段提供服务。我们将展示如何通过ASSERT4SOA项目中开发的服务安全证书来实现工作流操作保证。
{"title":"Workflow Operational Assurance Platform for Security-by-Design Certified Service-Based Coalitions","authors":"Javier Espinar, A. Maña, Hristo Koshutanski","doi":"10.1109/SERVICES.2013.14","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.14","url":null,"abstract":"The concept of Dynamic Coalitions (DCs) provides a scalable approach for service-based business integration suitable to Small and Medium-size Enterprises (SMEs). An outcome of a DC model is a composite service offered to a market place. The notion of security-by-design certified coalition enables coalition designers/owners to request a certification authority to certify whether the coalition workflow design supports certain security properties of interest by stipulating the security properties individual services have to conform to. This paper presents an approach based on a novel Highly Dynamic Coalition (HDC) concept able to provide workflow operation assurance for security-by-design certified service-based coalitions. Certified HDC models can become an enabler for SMEs to participate in coalition formations guaranteeing a certified level of security. Users of HDC-based services will have assurance for the properties preserved during coalition operation, while service providers will have assurance in providing services during HDC formations and partners' selection phases. We will show how workflow operation assurance is realized by means of service security certificates developed in ASSERT4SOA project.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132540098","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Personalized Mobile Web Service Discovery 个性化移动Web服务发现
Pub Date : 2013-06-28 DOI: 10.1109/SERVICES.2013.18
Khalid Elgazzar, Patrick Martin, H. Hassanein
Mobile devices with their various form factors have become the most convenient and pervasive computing platform, whether to carry out everyday business or to get online. Mobile users tend to adopt the fast food trend even in consuming online mobile services and functionalities. The Web service approach promises great flexibility in offering software functionality over the network, while maintaining interoperability between heterogeneous platforms. However, the diversity that exists in mobile devices and their platforms with variations in capabilities present unique challenges in developing services that can accommodate such diversity. Recent years have witnessed the rise of user-facing service developments that can be consumed on the go with standard interface, such as RESTful Web services. However, the discovery of such services does not match their growing popularity. In addition, existing discovery approaches lack supporting mechanisms that ensure the proper functioning of discovered services within the user context and failing to match personal preferences. This paper introduces personalized Web service discovery for mobile environments. Preliminary results show that incorporating user preferences and context significantly improves the overall precision of service discovery.
各种各样的移动设备已经成为最方便和普及的计算平台,无论是进行日常业务还是上网。移动用户甚至在消费在线移动服务和功能方面也倾向于采用快餐趋势。Web服务方法在通过网络提供软件功能方面保证了极大的灵活性,同时保持了异构平台之间的互操作性。然而,移动设备及其平台中存在的多样性及其功能的变化给开发能够适应这种多样性的服务带来了独特的挑战。最近几年见证了面向用户的服务开发的兴起,这些服务可以通过标准接口随时使用,比如RESTful Web服务。然而,这些服务的发现与它们日益受欢迎的程度并不相符。此外,现有的发现方法缺乏支持机制,无法确保发现的服务在用户上下文中正常运行,也无法匹配个人偏好。本文介绍了针对移动环境的个性化Web服务发现。初步结果表明,结合用户偏好和上下文显著提高了服务发现的整体精度。
{"title":"Personalized Mobile Web Service Discovery","authors":"Khalid Elgazzar, Patrick Martin, H. Hassanein","doi":"10.1109/SERVICES.2013.18","DOIUrl":"https://doi.org/10.1109/SERVICES.2013.18","url":null,"abstract":"Mobile devices with their various form factors have become the most convenient and pervasive computing platform, whether to carry out everyday business or to get online. Mobile users tend to adopt the fast food trend even in consuming online mobile services and functionalities. The Web service approach promises great flexibility in offering software functionality over the network, while maintaining interoperability between heterogeneous platforms. However, the diversity that exists in mobile devices and their platforms with variations in capabilities present unique challenges in developing services that can accommodate such diversity. Recent years have witnessed the rise of user-facing service developments that can be consumed on the go with standard interface, such as RESTful Web services. However, the discovery of such services does not match their growing popularity. In addition, existing discovery approaches lack supporting mechanisms that ensure the proper functioning of discovered services within the user context and failing to match personal preferences. This paper introduces personalized Web service discovery for mobile environments. Preliminary results show that incorporating user preferences and context significantly improves the overall precision of service discovery.","PeriodicalId":169370,"journal":{"name":"2013 IEEE Ninth World Congress on Services","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128753153","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
期刊
2013 IEEE Ninth World Congress on Services
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1