Please wait a minute...
Front. Inform. Technol. Electron. Eng.  2018, Vol. 19 Issue (4): 494-502    DOI:
    
Using information flow analysis to detect implicit information leaks for web service composition
Jia-xin JIANG, Zhi-qiu HUANG, Wei-wei MA, Yan CAO
College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 210016, China
Collaborative Innovation Center of Novel Software Technology and Industrialization, Nanjing 210000, China
Download:   PDF(0KB)
Export: BibTeX | EndNote (RIS)      

Abstract  Information leak, which can undermine the compliance of web-service-composition business processes
for some policies, is one of the major concerns in web service composition.  We present an automated and effective
approach for the detection of implicit information leaks in business process execution language (BPEL) based on
information flow analysis.  We introduce an adequate meta-model for BPEL representation based on a Petri net for
transformation and analysis. Building on the concept of Petri net place-based noninterference, the core contribution
of this paper is the application of a Petri net reachability graph to estimate Petri net interference and thereby to
detect implicit information leaks in web service composition.  In addition, a case study illustrates the application of
the approach on a concrete workflow in BPEL notation.


Key wordsInformation flow analysis      Business process execution language      Petri net      Interference     
Received: 24 June 2016      Published: 06 June 2019
Cite this article:

Jia-xin JIANG, Zhi-qiu HUANG, Wei-wei MA, Yan CAO. Using information flow analysis to detect implicit information leaks for web service composition. Front. Inform. Technol. Electron. Eng., 2018, 19(4): 494-502.

URL:

http://www.zjujournals.com/xueshu/fitee/     OR     http://www.zjujournals.com/xueshu/fitee/Y2018/V19/I4/494


Using information flow analysis to detect implicit information leaks for web service composition

Information leak, which can undermine the compliance of web-service-composition business processes
for some policies, is one of the major concerns in web service composition.  We present an automated and effective
approach for the detection of implicit information leaks in business process execution language (BPEL) based on
information flow analysis.  We introduce an adequate meta-model for BPEL representation based on a Petri net for
transformation and analysis. Building on the concept of Petri net place-based noninterference, the core contribution
of this paper is the application of a Petri net reachability graph to estimate Petri net interference and thereby to
detect implicit information leaks in web service composition.  In addition, a case study illustrates the application of
the approach on a concrete workflow in BPEL notation.

关键词: Information flow analysis,  Business process execution language,  Petri net,  Interference 
[1] Jun WANG , Xiao-jie WEN , Chuan HUANG , Chao-jin QING. Optimal precoding for full-duplex base stations under strongly correlated self-interference channels[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(6): 808-816.
[2] Sandeep SAROWA, Harmanjeet SINGH, Sunil AGRAWAL, B. S. SOHI . A novel energy-efficient ICI cancellation technique for bandwidth improvements through cyclic prefix reuse in an OFDM system[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(11): 1892-1899.
[3] Dan LI, Shan WANG, Fang-lin GU. Optimal signal design strategy with improper Gaussian signaling in the Z-interference channel[J]. Front. Inform. Technol. Electron. Eng., 2017, 18(11): 1900-1912.
[4] Jin Wang, Feng Shu, Ri-qing Chen, Yu-di Cui, Yu Chen, Jun Li. Adaptive robust beamformer for multi-pair two-way relay networks with imperfect channel state information[J]. Front. Inform. Technol. Electron. Eng., 2016, 17(3): 265-280.
[5] Ji-Hoon Park, Byung-Seo Kim. Reliable beacon transmission based MAC protocol for LR-WPANs over WLAN interferences[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(6): 470-481.
[6] Gui-jie Wang, Yun-long Cai, Min-jian Zhao, Jie Zhong. Joint adaptive power allocation and interference suppression algorithms based on the MSER criterion for wireless sensor networks[J]. Front. Inform. Technol. Electron. Eng., 2014, 15(10): 917-928.
[7] Mo-fei Song, Zheng-xing Sun, Yan Zhang, Fei-qian Zhang. Synthesis of 3D models by Petri net[J]. Front. Inform. Technol. Electron. Eng., 2013, 14(7): 521-529.