Quality-Driven Business Policy Specification and Refinement for Service-Oriented Systems

Authors:
Tan Phan;Jun Han;Jean-Guy Schneider;Kirk Wilson
Affiliations:
Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Australia VIC 3122;Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Australia VIC 3122;Faculty of Information & Communication Technologies, Swinburne University of Technology, Hawthorn, Australia VIC 3122;CA Labs, One CA Plaza, Islandia, USA NY 11749
Venue:
ICSOC '08 Proceedings of the 6th International Conference on Service-Oriented Computing
Year:
2008

Citing 9
Cited 2

The WSLA Framework: Specifying and Monitoring Service Level Agreements for Web Services

Journal of Network and Systems Management
The Ponder Policy Specification Language

POLICY '01 Proceedings of the International Workshop on Policies for Distributed Systems and Networks
SLAng: A Language for Defining Service Level Agreements

FTDCS '03 Proceedings of the The Ninth IEEE Workshop on Future Trends of Distributed Computing Systems
KAoS Policy and Domain Services: Toward a Description-Logic Approach to Policy Representation, Deconfliction, and Enforcement

POLICY '03 Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks
Model-Driven Security Based on a Web Services Security Architecture

SCC '05 Proceedings of the 2005 IEEE International Conference on Services Computing - Volume 01
Assessing Security Properties of Software Components: A Software Engineer's Perspective

ASWEC '06 Proceedings of the Australian Software Engineering Conference
Quality Attributes for Service-Oriented Architectures

SDSOA '07 Proceedings of the International Workshop on Systems Development in SOA Environments
A Survey of Policy-Based Management Approaches for Service Oriented Systems

ASWEC '08 Proceedings of the 19th Australian Conference on Software Engineering
Security ontology for annotating resources

OTM'05 Proceedings of the 2005 OTM Confederated international conference on On the Move to Meaningful Internet Systems: CoopIS, COA, and ODBASE - Volume Part II

Incorporating Security Requirements into Service Composition: From Modelling to Execution

ICSOC-ServiceWave '09 Proceedings of the 7th International Joint Conference on Service-Oriented Computing
Towards an approach to design and enforce security in web service composition

International Journal of Web Engineering and Technology

Quantified Score

Hi-index	0.00

Visualization

Abstract

Enterprise software systems play an essential role in an organization's business operation. Many business rules and regulations governing an organization's operation can be translated into quality requirements of the relevant software systems, such as security, availability, and manageability. For systems implemented using Web Services , the specification and management of these qualities in the form of Web Service policies are often complicated and difficult to be aligned with the initial business requirements. In this paper, we introduce the Hope (High-Level Objective-based Policy for Enterprises) framework that supports, in a systematic manner, the specification of quality-oriented policies at the business level and their refinement into policies at the system/service level. Quality-oriented business requirements are expressed in Hope as quality objectives applied to business entities and further refined or translated into system-level WS-Policy statements. The refinement relies on an application-specific business entity model and application-independent domain quality models. We demonstrate the approach with a case study involving policy specification and refinement in the security domain.