Cooperative middleware specialization for service oriented architectures
Proceedings of the 13th international World Wide Web conference on Alternate track papers & posters
Business Rules Integration in BPEL " A Service-Oriented Approach
CEC '05 Proceedings of the Seventh IEEE International Conference on E-Commerce Technology
Reliable, Secure, and Transacted Web Service Compositions with AO4BPEL
ECOWS '06 Proceedings of the European Conference on Web Services
Apache CXF Web Service Development
Apache CXF Web Service Development
Toward Accountability in the Cloud
IEEE Internet Computing
Modularization of distributed web services using aspects with explicit distribution (AWED)
ODBASE'06/OTM'06 Proceedings of the 2006 Confederated international conference on On the Move to Meaningful Internet Systems: CoopIS, DOA, GADA, and ODBASE - Volume Part II
Ensuring Distributed Accountability for Data Sharing in the Cloud
IEEE Transactions on Dependable and Secure Computing
Hi-index | 0.00 |
Accountability properties, i.e., security and privacy properties for trustworthy data stewardship, are becoming increasingly important for Cloud applications. Frequently, they have to be enforced on large-scale service-based applications. In this paper we argue that real-world service infrastructures are best modeled in terms of three abstraction levels and that (partially invasive) adaptations involving all levels are needed to handle accountability properties. We motivate these issues for the case of secure logging, a basic accountability property of Cloud applications. We propose an initial version of a DSL for flexible and expressive control over the execution of service compositions on the three abstraction levels: service orchestrations, interceptors and service implementations. We also present a corresponding prototype tool and infrastructure for the manipulation of service compositions at all three levels that we have implemented over Apache CXF. Finally, we show how our method can be applied to enable secure logging in previously logging-agnostic applications.