security engineering of soa applications via reliability patterns通过可靠性模式安全工程的soa应用程序.pdf

Journal of Software Engineering and Applications, 2011, 1, 1-8 doi:10.4236/jsea.2011.41001 Published Online January 2011 (/journal/jsea) Security Engineering of SOA Applications Via Reliability Patterns Luigi Coppolino, Luigi Romano, Valerio Vianello Centro Direzionale di Napoli, Dipartimento per le Tecnologie, Università degli Studi di Napoli “Parthenope”, Napoli, Italy Email:{luigi.coppolino, lrom, valerio.vianello}@uniparthenope.it Received November 30th, 2010; revised December 20th, 2010; accepted December 30th, 2010. ABSTRACT Providing reliable compositions of Web Services is a challenging issue since the workflow architect often has only a limited control over the reliability of the composed services. The architect can instead achieve reliability by properly planning the workflow architecture. To this end he must be able to evaluate and compare the reliability of multiple arc- hitectural solutions. In this paper we present a useful tool which allows to conduct reliability analysis on planned workflows, as well as to compare the reliability of alternative solutions in a what-if analysis. The tool is implemented as a plug-in for the widely adopted Active BPEL Designer and exploits the concept of reliability pattern to evaluate the reliability formula of the workflow. The effectiveness of the approach and the operation of the tool are demonstrated with respect to a case study of a business security infrastructure realized by orchestrating simple security services. Keywords: Reliability of Security Services, Reliability Patterns, Workflow Systems, SOA Applications, Web Services Technology 1. Rationale and Contribution the reliability engineer designing the workflow has no chance to modify the simple services at all, especially Web Services c