Security Conscious Web Service Composition with Semantic Web Support

A Web service is a software system designed to support interoperable application-to-application interactions over the Internet. Recently, there has been a growing interest in Web service composition, and some languages (e.g.. WSBPEL and BPML) for modeling the composition have been proposed. In this paper, we focus on security constraints of Web service composition with semantic Web support, which have not been deeply investigated so far. Based on our prior work, we present a method for modeling security constraints and a brokered architecture, which exploits the REI reasoner. to build composite Web services according to the specified security constraints.

[1]  Asit Dan,et al.  Web services agreement specification (ws-agreement) , 2004 .

[2]  Katia Sycara,et al.  OWL-S Technology for Representing Constraints and Capabilities of Web Services , 2004 .

[3]  Yaron Goland,et al.  Web Services Business Process Execution Language , 2009, Encyclopedia of Database Systems.

[4]  Timothy W. Finin,et al.  A policy language for a pervasive computing environment , 2003, Proceedings POLICY 2003. IEEE 4th International Workshop on Policies for Distributed Systems and Networks.

[5]  Tran Cao Son,et al.  Adapting Golog for Composition of Semantic Web Services , 2002, KR.

[6]  Timothy W. Finin,et al.  Authorization and privacy for semantic Web services , 2004, IEEE Intelligent Systems.

[7]  Timothy W. Finin,et al.  Modeling conversation policies using permissions and obligations , 2004, Autonomous Agents and Multi-Agent Systems.

[8]  Jerry R. Hobbs,et al.  DAML-S: Semantic Markup for Web Services , 2001, SWWS.

[9]  Robert Richards,et al.  Universal Description, Discovery, and Integration (UDDI) , 2006 .

[10]  Lalana Kagal.  Rei : A Policy Language for the Me-Centric Project , 2002 .

[11]  Daniel Roth,et al.  Web Services Policy Framework (WS- Policy) , 2002 .

[12]  Timothy W. Finin,et al.  A Policy Based Approach to Security for the Semantic Web , 2003, SEMWEB.

[13]  Jan Mendling.  Business Process Execution Language for Web Service (BPEL) , 2006 .

[14]  Barbara Carminati,et al.  Security Conscious Web Service Composition , 2006, 2006 IEEE International Conference on Web Services (ICWS'06).

[15]  Lalana Kagal,et al.  Policy-based Access Control for Task Computing Using Rei , 2005 .

[16]  Anupam Joshi,et al.  A Secure Infrastructure for Service Discovery and Access in Pervasive Computing , 2003, Mob. Networks Appl..

[17]  Jean Jacques Moreau,et al.  SOAP Version 1. 2 Part 1: Messaging Framework , 2003 .

[18]  Xiang Fu,et al.  Conversation specification: a new approach to design and analysis of e-service composition , 2003, WWW '03.

[19]  Massimo Bartoletti,et al.  Plans for service composition , 2006 .

[20]  Barbara Carminati,et al.  Exploring privacy issues in Web services discovery/agencies , 2005, IEEE Security & Privacy Magazine.

[21]  Ahmed K. Elmagarmid,et al.  Composing Web services on the Semantic Web , 2003, The VLDB Journal.

[22]  Sean Bechhofer,et al.  OWL: Web Ontology Language , 2009, Encyclopedia of Database Systems.

[23]  Matjaz B. Juric,et al.  Business process execution language for web services , 2004 .