An adaptable security framework for service-based systems

Sik-Sang Yau, Yisheng Yao, Zhaoji Chen, Luping Zhu

Research output: Chapter in Book/Report/Conference proceedingConference contribution

8 Scopus citations

Abstract

A major advantage of service-based computing technology is the ability to enable rapid formation of large-scale distributed systems by composing massively available services to achieve the system goals, regardless of the programming languages and platforms used to develop and run these services. In these large-scale service-based systems, various capabilities are provided by different organizations and interconnected by various types of networks, including wireless (infrastructure or ad hoc) and wired networks. For these systems which often involve multiple organizations, high confidence and adaptability are of prime concern to ensure that users can use these systems anywhere, any time, through various devices, knowing that their confidentiality and privacy are well protected under various situations. In this paper, an adaptable security framework for large-scale service-based systems is presented. It includes a core ontology and a logic-based situation-aware security specification language for specifying dynamic security policies for service-based systems, an approach to policy conflict detection and resolution, and tools for generating and deploying security agents to enforce security policies. With this framework, various parties of large-scale service-based systems can rapidly specify, update, verify, and enforce security policies in service-based systems to meet their security requirements under various situations.

Original languageEnglish (US)
Title of host publicationProceedings - 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS 2005
Pages28-35
Number of pages8
DOIs
StatePublished - Nov 10 2005
Event10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS 2005 - Sedona, AZ, United States
Duration: Feb 2 2005Feb 4 2005

Publication series

NameProceedings - International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS
ISSN (Print)1530-1443

Other

Other10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS 2005
CountryUnited States
CitySedona, AZ
Period2/2/052/4/05

    Fingerprint

Keywords

  • Adaptability
  • Security agent
  • Security framework
  • Security policy
  • Service-based systems
  • Situation-awareness

ASJC Scopus subject areas

  • Engineering(all)

Cite this

Yau, S-S., Yao, Y., Chen, Z., & Zhu, L. (2005). An adaptable security framework for service-based systems. In Proceedings - 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS 2005 (pp. 28-35). (Proceedings - International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS). https://doi.org/10.1109/WORDS.2005.15