arrow
返回

Vulnerability Analysis in SOA-Based Business Processes

delete2011-07-01
delete21
PRE
AI
R
Rafael Accorsi
DOI:10.1109/TSC.2010.37delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Business processes and services can more flexibly be combined when based upon standards. However, such flexible compositions practically always contain vulnerabilities, which imperil the security and dependability of processes. Vulnerability management tools require patterns to find or monitor vulnerabilities. Such patterns have to be derived from vulnerability types. Existing analysis methods such as attack trees and FMEA result in such types, yet require much experience and provide little guidance during the analysis. Our main contribution is ATLIST, a new vulnerability analysis method with improved transferability. Especially in service-oriented architectures, which employ a mix of established web technologies and SOA-specific standards, previously observed vulnerability types and variations thereof can be found. Therefore, we focus on the detection of known vulnerability types by leveraging previous vulnerability research. A further contribution in this respect is the, to the best of our knowledge, most comprehensive compilation of vulnerability information sources to date. We present the method to search for vulnerability types in SOA-based business processes and services. Also, we show how patterns can be derived from these types, so that tools can be employed. An additional contribution is a case study, in which we apply the new method to an SOA-based business process scenario.
Keyword:
Service security and dependability
vulnerability analysis
SOA-based business processes
vulnerability classification
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Services Computing 封面图
IEEE Transactions on Services Computing
IF:
5.8
论文数:
2.2K
被引数:
6.5K

机构

U
University of Freiburg
学者数:
3.3W
论文数: 2.4W
被引数: 3.4W
引用论文

引用论文

Allosteric binding of amino alcohols and diamines by dimeric zinc biladienone
err2009-02-01
err0
PREAI
errTomofumi Shimizu; Naomi Asano; Tadashi Mizutani; Ho-Chol Chang; Susumu Kitagawa
err分享
err收藏
Temporal Overlap and Co-Occurrence in a Guild of Sub-Tropical Tephritid Fruit Flies亚热带实蝇群落的时序重叠与共现现象
err2015-07-10
err0
errOAAI
errGleidyane N. Lopes; Miguel F. Souza-Filho; Nicholas J. Gotelli; Leandro J. U. Lemos; Wesley A. C. Godoy; Roberto A. Zucchi
err分享
err收藏
CONFINEMENT PROBLEM
err1973-10-01
err741
errOAAI
errLAMPSON, BW
err分享
err收藏
学者 查看更多内容