Evolving security requirements in multi-layered service-oriented-architectures

  • Authors:
  • Muhammad Sabir Idrees;Gabriel Serme;Yves Roudier;Anderson Santana De Oliveira;Herve Grall;Mario Sü/dholt

  • Affiliations:
  • EURECOM, Sophia Antipolis, France;SAP Research, Mougins;EURECOM, Sophia Antipolis, France;SAP Research, Mougins;ASCOLA Group/ EMN-INRIA, LINA, Dpt. Informatique, É/cole des Mines de Nantes, Nantes Cedex 3, France;ASCOLA Group/ EMN-INRIA, LINA, Dpt. Informatique, É/cole des Mines de Nantes, Nantes Cedex 3, France

  • Venue:
  • DPM'11 Proceedings of the 6th international conference, and 4th international conference on Data Privacy Management and Autonomous Spontaneus Security
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Due to today's rapidly changing corporate environments, business processes are increasingly subject to dynamic configuration and evolution. The evolution of new deployment architectures, as illustrated by the move towards mobile platforms and the Internet Of Services, and the introduction of new security regulations (imposed by national and international regulatory bodies, such as SOX or BASEL) are an important constraint in the design and development of business processes. In such a context, it is not sufficient to apply the corresponding adaptations only at the service orchestration or at the choreography level; there is also the need for controlling the impact of new security requirements to several architectural layers, specially in cloud computing, where the notion of Platforms as Services and Infrastructure as Services are fundamental. In this paper we survey several research questions related to security cross-domain and cross-layer security functionality in Service Oriented Architectures, from an original point of view. We provide the first insights on how a general service model empowered with aspect oriented programming capabilities can provide clean modularization to such cross-cutting security concerns.