TY  - CONF
TI  - Integrity and Confidentiality Annotations for Service Interfaces in SoaML Models
AB  - This paper presents an approach for incorporating data integrity and data confidentiality into the model-driven development (MDD) of process-driven service-oriented architectures (SOAs) based on the OMG SoaML. Specifications for service interfaces are extended by UML activities to model invocation protocols. An invocation protocol makes the control and the object flows between service invocations explicit. Integrity and confidentiality attributes are used to annotate the object flows. The annotations serve for generating security-aware execution artefacts (e.g., interface description documents, deployment descriptors, and middleware configurations). We applied the approach prototypically in a Web Services platform environment (WS-BPEL, WSDL, WS-SecurityPolicy).
AF  - Proceedings of the International Workshop on Security Aspects of Process-aware Information Systems (SAPAIS)
PP  - Washington, D.C.
PB  - IEEE Computer Society Press
SP  - 673
EP  - 679
PY  - 2011-01-01
AU  - Hoisl, Bernhard 
AU  - Sobernig, Stefan 
ER -