2011 European Intelligence and Security Informatics Conference (EISIC)

Mourad, Azzam; Otrok, Hadi; Ayoubi, Sara

2011 European Intelligence and Security Informatics Conference (EISIC)

Title: 2011 European Intelligence and Security Informatics Conference (EISIC);
Toward systematic integration of security policies into web services

Mourad, Azzam; Otrok, Hadi; Ayoubi, Sara; SAS; 200904853; Computer Science and Mathematics; azzam.mourad@lau.edu.lb; Lebanese American University

URI: http://hdl.handle.net/10725/5334

URL: http://ieeexplore.ieee.org/abstract/document/6061238/

DOI: http://dx.doi.org/10.1006/bbrc.1994.188310.1109/EISIC.2011.48

Abstract:

In this paper, we introduce our approach for the automatic generation of BPEL (Business Process Execution Language) aspects from security policies. It is based on a synergy between policies, Aspect-Oriented Programming (AOP) and composition of web services. Our proposed approach allows first to transform security policies into BPEL aspects. Then, the generated aspects are weaved in the BPEL process of the composed web services at runtime [1]. The main contributions of our approach are: (1) Describing dynamic security policies, (2) generating automatically the BPEL aspects, (3) separating the business and security concerns of composite web services, and hence developing them separately (4) allowing the modification of the dynamic security features and web services composition at run time and (5) providing modularity for modeling cross-cutting concerns between web services.

Citation:

Mourad, A., Otrok, H., & Ayoubi, S. (2011, September). Toward Systematic Integration of Security Policies into Web Services. In Intelligence and Security Informatics Conference (EISIC), 2011 European (pp. 220-223). IEEE.