|
|
|
| Using information flow analysis to detect implicit information leaks for web service composition |
| Jia-xin JIANG, Zhi-qiu HUANG, Wei-wei MA, Yan CAO |
College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 210016, China
Collaborative Innovation Center of Novel Software Technology and Industrialization, Nanjing 210000, China |
|
|
|
Abstract Information leak, which can undermine the compliance of web-service-composition business processes
for some policies, is one of the major concerns in web service composition. We present an automated and effective
approach for the detection of implicit information leaks in business process execution language (BPEL) based on
information flow analysis. We introduce an adequate meta-model for BPEL representation based on a Petri net for
transformation and analysis. Building on the concept of Petri net place-based noninterference, the core contribution
of this paper is the application of a Petri net reachability graph to estimate Petri net interference and thereby to
detect implicit information leaks in web service composition. In addition, a case study illustrates the application of
the approach on a concrete workflow in BPEL notation.
|
|
Received: 24 June 2016
Published: 06 June 2019
|
Using information flow analysis to detect implicit information leaks for web service composition
Information leak, which can undermine the compliance of web-service-composition business processes
for some policies, is one of the major concerns in web service composition. We present an automated and effective
approach for the detection of implicit information leaks in business process execution language (BPEL) based on
information flow analysis. We introduce an adequate meta-model for BPEL representation based on a Petri net for
transformation and analysis. Building on the concept of Petri net place-based noninterference, the core contribution
of this paper is the application of a Petri net reachability graph to estimate Petri net interference and thereby to
detect implicit information leaks in web service composition. In addition, a case study illustrates the application of
the approach on a concrete workflow in BPEL notation.
关键词:
Information flow analysis,
Business process execution language,
Petri net,
Interference
|
Viewed |
|
|
|
Full text
|
|
|
|
|
Abstract
|
|
|
|
|
Cited |
|
|
|
|
| |
Shared |
|
|
|
|
| |
Discussed |
|
|
|
|