论文部分内容阅读
服务组合作为实现服务增值的一种有效方法,业已广泛使用于各种应用.安全问题是与Web服务密切相关且对于服务组合的可信性具有重要作用.然而目前还缺乏对服务安全组合进行有效描述和分析的方法.提出一种基于面向方面的形式化服务安全组合建模及其分析方法.重点讨论了服务的授权、执行的可追踪、数据保护及故障处理,并利用面向方面规范基本模块的行为、描述它们相互关系的手段,编织机制将这些模块动态地集成为一个完整的服务组合模型.基于此,Petri网的操作语义及相关理论分析服务组合的安全性及故障处理能力,给出服务组合的正确性准则,并证明了其有效性.具体实例及仿真结果表明,该方法能有效地简化系统建模,有助于提高服务组合的设计质量.
Service composition, as an effective way to realize value-added services, has been widely used in various applications.Safety problems are closely related to Web services and play an important role in the credibility of service composition.However, there is a lack of effective service security portfolio Description and analysis of the proposed service-oriented formal service-oriented security portfolio modeling and analysis methods.Focuses on the service authorization, execution traceability, data protection and fault handling, and the use of Aspect Oriented Basic Module , And describe the relationship between them.The weaving mechanism dynamically integrates these modules into a complete service composition model.On the basis of this, the operational semantics of Petri nets and related theories analyze the security and fault handling ability of service composition, The correctness criterion of service composition is proved and its effectiveness is proved.Examples and simulation results show that this method can effectively simplify the system modeling and improve the design quality of service composition.