Automata-Based Verification of Security Requirements of Composite Web Services

— With the increasing reliance of complex real-world applications on composite web services assembled from independently developed component services, there is a growing need for effective approaches to verifying that a composite service not only offers the required functionality but also satisfies the desired non-functional requirements (NFRs). In high-assurance applications such as traffic control, medical decision support, and coordinated response to civil emergencies, of special concern are NFRs having to do with security, safety and reliability of composite services. Current approaches to verifying NFRs of composite services (as opposed to individual services) remain largely ad-hoc and informal in nature. In this paper we develop techniques for ensuring that a composite service meets the user-specified NFRs expressible in the form of hard constraints e.g., “response time has to be less than 5 minutes.” We introduce an automata-based framework for verifying that a composite s...

• Type: Journal
• Year: 2010
• Where: ISSRE
• Authors: Hongyu Sun, Samik Basu, Vasant Honavar, Robyn R. Lutz
• Keywords: Composite Service, Hard Constraints, ISSRE 2010, NFRs, Software Engineering