返回
Vulnerability Analysis in SOA-Based Business Processes
DOI:10.1109/TSC.2010.37.png)
摘要
En 中文
Business processes and services can more flexibly be combined when based upon standards. However, such flexible compositions practically always contain vulnerabilities, which imperil the security and dependability of processes. Vulnerability management tools require patterns to find or monitor vulnerabilities. Such patterns have to be derived from vulnerability types. Existing analysis methods such as attack trees and FMEA result in such types, yet require much experience and provide little guidance during the analysis. Our main contribution is ATLIST, a new vulnerability analysis method with improved transferability. Especially in service-oriented architectures, which employ a mix of established web technologies and SOA-specific standards, previously observed vulnerability types and variations thereof can be found. Therefore, we focus on the detection of known vulnerability types by leveraging previous vulnerability research. A further contribution in this respect is the, to the best of our knowledge, most comprehensive compilation of vulnerability information sources to date. We present the method to search for vulnerability types in SOA-based business processes and services. Also, we show how patterns can be derived from these types, so that tools can be employed. An additional contribution is a case study, in which we apply the new method to an SOA-based business process scenario.
Keyword:
Service security and dependability
vulnerability analysis
SOA-based business processes
vulnerability classification
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
5.8
论文数:
2.2K
被引数:
6.5K
机构
引用论文
Calculation of Aerodynamic Performance Characteristics of Airplane Wing and Comparing with the Experimental Measurement飞机机翼气动性能特性的计算与实验测量结果的比较
Effects of Sex Ratio on Milkweed Beetle Emigration from Host Plant Patches性别比例对马利筋甲虫从宿主植物斑块迁出的影响
Ecology
IF0
Temporal Overlap and Co-Occurrence in a Guild of Sub-Tropical Tephritid Fruit Flies亚热带实蝇群落的时序重叠与共现现象
PLOS ONE
IF0
Numerical Modelling and Simulation of Wind Turbine Blade Aerofoil for Performance Enhancement风力涡轮机叶片翼型性能提升的数值建模与仿真

