A Survey on Quantitative Evaluation of Web Service Security

Zhou, Bo; Shi, Qi; Yang, Po

doi:10.1109/trustcom.2016.0130

Cited by 7 publications

(3 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…i) they use IP network that is host centric and cannot cater up any form of distributed communication system, which is the need of present age, ii) the policy of IP address is encountering exhaustion with the exponential rise of users, iii) no inclusion of security attributes (except IPv6 that offers distinct and unique IP addresses to promote security), iv) highly non-flexible posing difficult to incorporate new operation [13]. Therefore, web security has become one of the essential concerns among the network communities [14][15][16] and this leads to the formation of Future Internet Architecture (FIA) [17]. One of the essential parts of FIA is its security inclusion.…”

Section: Introductionmentioning

confidence: 99%

Reviewing effectivity in security approaches towards strengthening internet architecture

Vidya¹,

Patil²

2019

IJECE

View full text Add to dashboard Cite

<span>The usage of existing Internet architecture is shrouded by various security loopholes and hence is highly ineffective towards resisting potential threats over internet. Hence, it is claimed that future internet architecture has been evolved as a solution to address this security gaps of existing internet architecture. Therefore, this paper initiates its discussion by reviewing the existing practices of web security in conventional internet architecture and has also discussed about some recent solutions towards mitigating potentially reported threats e.g. cross-site scripting, SQL inject, and distributed denial-of-service. The paper has also discussed some of the recent research contribution towards security solution considering future internet architecture. The proposed manuscripts contributes to showcase the true effectiveness of existing approaches with respect to advantages and limitation of existing approaches along with explicit highlights of existing research problems that requires immediate attention.</span>

show abstract

Section: Introductionmentioning

confidence: 99%

Reviewing effectivity in security approaches towards strengthening internet architecture

Vidya¹,

Patil²

2019

IJECE

View full text Add to dashboard Cite

show abstract

“…However, these approaches mainly focus on a single program that works in a centralized way. During the service composition, there may be several services with similar functions but developed by different mobile service providers, which requires us to select appropriate services for optimized performance [ 6 , 23 ]. It would be a resource-consuming work to evaluate all possible services by a single piece of equipment, which is hard to be implemented due to the energy-limited features of mobile terminals.…”

Section: Introductionmentioning

confidence: 99%

Secure Service Composition with Quantitative Information Flow Evaluation in Mobile Computing Environments

2019

Entropy

View full text Add to dashboard Cite

The advances in mobile technologies enable mobile devices to cooperate with each other to perform complex tasks to satisfy users’ composite service requirements. However, data with different sensitivities and heterogeneous systems with diverse security policies pose a great challenge on information flow security during the service composition across multiple mobile devices. The qualitative information flow control mechanism based on non-interference provides a solid security assurance on the propagation of customer’s private data across multiple service participants. However, strict discipline limits the service availability and may cause a high failure rate on service composition. Therefore, we propose a distributed quantitative information flow evaluation approach for service composition across multiple devices in mobile environments. The quantitative approach provides us a more precise way to evaluate the leakage and supports the customized disciplines on information flow security for the diverse requirements of different customers. Considering the limited energy feature on mobile devices, we use a distributed evaluation approach to provide a better balance on consumption on each service participant. Through the experiments and evaluations, the results indicate that our approach can improve the availability of composite service effectively while the security can be ensured.

show abstract

“…Traditional verification techniques cannot foresee all of these changes as they are mainly pre‐deployment activities. These challenges call for more effective approaches towards runtime monitoring of services …”

Section: Introductionmentioning

confidence: 99%

Security policy monitoring of BPMN‐based service compositions

Asim

Yautsiukhin

Brucker

et al. 2018

J Software Evolu Process

Self Cite

View full text Add to dashboard Cite

Service composition is a key concept of Service‐Oriented Architecture that allows for combining loosely coupled services that are offered and operated by different service providers. Such environments are expected to dynamically respond to changes that may occur at runtime, including changes in the environment and individual services themselves. Therefore, it is crucial to monitor these loosely coupled services throughout their lifetime. In this paper, we present a novel framework for monitoring services at runtime and ensuring that services behave as they have promised. In particular, we focus on monitoring non‐functional properties that are specified within an agreed security contract. The novelty of our work is based on the way in which monitoring information can be combined from multiple dynamic services to automate the monitoring of business processes and proactively report compliance violations. The framework enables monitoring of both atomic and composite services and provides a user friendly interface for specifying the monitoring policy. We provide an information service case study using a real composite service to demonstrate how we achieve compliance monitoring. The transformation of security policy into monitoring rules, which is done automatically, makes our framework more flexible and accurate than existing techniques.

show abstract

A Survey on Quantitative Evaluation of Web Service Security

Cited by 7 publications

References 18 publications

Reviewing effectivity in security approaches towards strengthening internet architecture

Reviewing effectivity in security approaches towards strengthening internet architecture

Secure Service Composition with Quantitative Information Flow Evaluation in Mobile Computing Environments

Security policy monitoring of BPMN‐based service compositions

Contact Info

Product

Resources

About