Achieving life-cycle compliance of service-oriented architectures: open issues and challenges

Authors:
Theodoor Scholte;Engin Kirda
Affiliations:
SAP Research, Mougins Cedex, France;Institut Eurécom, Valbonne, France
Venue:
DPM'09/SETOP'09 Proceedings of the 4th international workshop, and Second international conference on Data Privacy Management and Autonomous Spontaneous Security
Year:
2009

Citing 16
Cited 0

A framework for information systems architecture

IBM Systems Journal
Logic based modeling and analysis of workflows

PODS '98 Proceedings of the seventeenth ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems
Dynamic weaving for aspect-oriented programming

AOSD '02 Proceedings of the 1st international conference on Aspect-oriented software development
An Overview of AspectJ

ECOOP '01 Proceedings of the 15th European Conference on Object-Oriented Programming
Patterns in Property Specifications for Finite-State Verification

Patterns in Property Specifications for Finite-State Verification
Model-Based Analysis of Obligations in Web Service Choreography

AICT-ICIW '06 Proceedings of the Advanced Int'l Conference on Telecommunications and Int'l Conference on Internet and Web Applications and Services
Taming Compliance with Sarbanes-Oxley Internal Controls Using Database Technology

ICDE '06 Proceedings of the 22nd International Conference on Data Engineering
Compliance checking between business processes and business contracts

EDOC '06 Proceedings of the 10th IEEE International Enterprise Distributed Object Computing Conference
Integration and verification of semantic constraints in adaptive process management systems

Data & Knowledge Engineering
A static compliance-checking framework for business process models

IBM Systems Journal
Model-driven business process security requirement specification

Journal of Systems Architecture: the EUROMICRO Journal
A transformation approach for security enhanced business processes

SE '08 Proceedings of the IASTED International Conference on Software Engineering
Business process management: a survey

BPM'03 Proceedings of the 2003 international conference on Business process management
Pattern-based design and validation of business process compliance

OTM'07 Proceedings of the 2007 OTM Confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part I
Pattern based property specification and verification for service composition

WISE'06 Proceedings of the 7th international conference on Web Information Systems
Computational logic for run-time verification of web services choreographies: exploiting the SOCS-SI tool

WS-FM'06 Proceedings of the Third international conference on Web Services and Formal Methods

Quantified Score

Hi-index	0.00

Visualization

Abstract

The introduction of regulations such as the Sarbanes-Oxley act requires companies to ensure that appropriate controls are implemented in their business applications. Implementing and validating compliance measures in ‘agile' companies is time consuming, costly, error-prone and a maintenance-intensive task. This paper presents an approach towards dynamically adapting a Service Oriented Architecture (SOA) such that business applications remain compliant. In order to ensure compliance, a compliance checking mechanism for the SOA is needed. Upon detection of a threat/violation, the components of a business application are adapted using aspect-oriented programming (AOP). In this paper, we discuss the fundamental problems and we give an architectural description of our approach.