Security Ontology to Facilitate Web Service Description and Discovery

Kim, Anya; Luo, Jin; Kang, Min Woo

doi:10.1007/978-3-540-74987-5_6

Cited by 10 publications

(13 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In the security domain, the NRL ontology [9] represents a very complete option, scoping from high-level security objectives, through security credentials, to technical encryption algorithms, and has been selected to formalize a vocabulary for the security intents.…”

Section: Metamodelsmentioning

confidence: 99%

“…For instance, an interaction marked "nonrepudiation" would imply associating to the message the actions of authenticating, signing and time-stamping. The NRL ontology [9], designed to facilítate automatic discovery and invocation, has been selected in this example to formalize the vocabulary for the annotation. Using NRL's matchmaking algorithm, different matching security and AC models are presented to the modeler for selection.…”

Section: Creating and Selecting The Input Modelsmentioning

confidence: 99%

See 1 more Smart Citation

Domain-Specific Multi-modeling of Security Concerns in Service-Oriented Architectures

Gallino

Miguel

Briones

et al. 2012

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. As a common reference for many in-development standards and execution frameworks, special attention is being paid to ServiceOriented Architectures. SOAs modeling, however, is an área in which a consensus has not being achieved. Currently, standardization organizations are defining proposals to offer a solution to this problem. Nevertheless, until very recently, non-functional aspects of services have not been considered for standardization processes. In particular, there exists a lack of a design solution that permits an independent development of the functional and non-functional concerns of SOAs, allowing that each concern be addressed in a convenient manner in early stages of the development, in a way that could guarantee the quality of this type of systems. This paper, leveraging on previous work, presents an approach to intégrate security-related non-functional aspects (such as confidentiality, integrity, and access control) in the development of services.

show abstract

Section: Metamodelsmentioning

confidence: 99%

Section: Creating and Selecting The Input Modelsmentioning

confidence: 99%

Domain-Specific Multi-modeling of Security Concerns in Service-Oriented Architectures

Gallino

Miguel

Briones

et al. 2012

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…We require various geospatial related domain ontologies, and other ontologies dealing with the nonfunctional aspects of the tasks. We expect to be able to rely partially on previous or related work such as the NRL Security Ontology [34]. There are three major metadata specifications related to geographic digital data: Geographic Metadata Standard ISO 19115:2003 [20], Dublin Core Metadata Initiative, and the Content Standard for Digital Geospatial Metadata, published by the Federal Geographic Data Committee (cite OntoMet).…”

Section: Components Required To Realize Geospatial Planning Projectmentioning

confidence: 99%

A Framework for Automatic Web Service Composition

Kim¹,

Kang²,

Meadows³

et al. 2009

Self Cite

View full text Add to dashboard Cite

Standard Form 298 (Rev. 8-98)Prescribed by ANSI Std. Z39.18Public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing this collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Complex mission plans may need to incorporate information from various sources and domains to achieve a task. This information is available through a variety of web services in the Service-Oriented Architecture (SOA), but the ability to automatically compose them into a single coherent task is not readily available. Traditional composition approaches require human-intensive involvement, making them time-consuming and error prone. Therefore, the ability to automatically or semi-automatically orchestrate web services in a short timeframe is highly desirable. SPONSOR / MONITOR'S ACRONYM(S) 9. SPONSORING / MONITORING AGENCY NAME(S) AND ADDRESS(ES) SPONSOR / MONITOR'S REPORT NUMBER(S)Recent works in the area of automatic web service composition produced a plethora of automation approaches with different degrees of automation. Different situations call for different composition approaches. However, there is a lack of guidance regarding what approaches are appropriate for a particular situation. In this paper, we examine the various approaches and develop a general-purpose framework for automatic service composition. Within the framework, we outline the common steps in the various composition processes and review the options available at each step. We also provide guidelines for choosing a composition approach within the framework for the geospatial planning domain. 30-04-2009Memorandum Report 0602435NFebruary AbstractComplex mission plans may need to incorporate information from various sources and domains to achieve a task. This information is available through a variety of web services in the Service-Oriented Architecture (SOA), but the ability to automatically compose them into a single coherent task is not readily available. Traditional composition approaches require human-intensive involvement, making them time-consuming and error prone. Therefore, the ability to automatically or semi-automatically orchestrate web services in a short timeframe is highly desirable.Recent works in the area of automatic web service composition produced a plethora of automation approaches with different degrees of automation. Different situations call for different composition approaches. However, there is a lack of guidance regarding what approaches are appropriate for a particular situation. In this paper, we examine the various approaches and develop a general-purpose framework for automatic service composition. Within the framework, we outline the common s...

show abstract

“…Agent main security ontology is based on the main security ontology that has been defined in [6]. Security objectives define goals that satisfies policy for the systems to assure security constraints.…”

Section: Multi-agent System Structurementioning

confidence: 99%

“…Policy ontology is based on [4] and [6] which define capabilities for consumer and producer-side semantic web services whereas our approach simply seems like this approach. All agents describe their security-related capability information to allow requestor agent for querying semantic policy definitions.…”

Section: Multi-agent System Structurementioning

confidence: 99%

An Architecture for Verification of Access Control Policies with Multi Agent System Ontologies

Tekbacak

Tuğlular

Dikenelli

2009

2009 33rd Annual IEEE International Computer Software and Applications Conference

View full text Add to dashboard Cite

Multi-agent systems (MAS) which communicate with intra-domain and inter-domain agent platforms have access control requirements. Instead of a central mechanism, a fine-graned access control mechanism could have been applied to MAS platforms. This paper emphasizes MAS-based domain and security ontologies with XACML-based access control approach for MAS platforms. The domain dependent behaviour and access control parameters in agent ontologies could be combined within a common XACML policy document that is used through different MAS applica

show abstract

Security Ontology to Facilitate Web Service Description and Discovery

Cited by 10 publications

References 8 publications

Domain-Specific Multi-modeling of Security Concerns in Service-Oriented Architectures

Domain-Specific Multi-modeling of Security Concerns in Service-Oriented Architectures

A Framework for Automatic Web Service Composition

An Architecture for Verification of Access Control Policies with Multi Agent System Ontologies

Contact Info

Product

Resources

About