October 11, 2011
CERIAS Security: Access Control and Resiliency for WS BPEL 1/4
Clip 1/4 Speaker: Federica Paci · Post-doctoral research associate Business processes the next generation workflows- have attracted considerable research interest in the last fifteen years. More recently, several XML-based languages have been proposed for specifying and orchestrating business processes, resulting in the WS-BPEL language. Even if WS-BPEL has been developed to specify automated business processes that orchestrate activities of multiple Web services, there are many applications and situations requiring that people be considered as additional participants that can influence the execution of a process. Significant omissions from WS-BPEL are the specification of activities that require interactions with humans to be completed, called human activities, and the specification of authorization information associating users with human activities in a WS-BPEL business process and authorization constraints, such as separation of duty, on the execution of human activities. This talk investigates the problem of access control and resiliency for WS-BPEL processes. Access control in the context of business process means checking whether a user claiming the execution of an activity is authorized and the execution does not violate authorization constraints. Resiliency means that even if some users become unavailable, the remaining users can still complete the execution of the process according to the stated authorizations and authorization constraints. We present RBAC-WS …
Filed under Tech by admin
Filed under Tech by admin
September 19, 2011
Export process models as.bpmn files
Filed under Tech by admin
Clip 2/4 Speaker: Federica Paci · Post-doctoral research associate Business processes the next generation workflows- have attracted considerable research interest in the last fifteen years. More recently, several XML-based languages have been proposed for specifying and orchestrating business processes, resulting in the WS-BPEL language. Even if WS-BPEL has been developed to specify automated business processes that orchestrate activities of multiple Web services, there are many applications and situations requiring that people be considered as additional participants that can influence the execution of a process. Significant omissions from WS-BPEL are the specification of activities that require interactions with humans to be completed, called human activities, and the specification of authorization information associating users with human activities in a WS-BPEL business process and authorization constraints, such as separation of duty, on the execution of human activities. This talk investigates the problem of access control and resiliency for WS-BPEL processes. Access control in the context of business process means checking whether a user claiming the execution of an activity is authorized and the execution does not violate authorization constraints. Resiliency means that even if some users become unavailable, the remaining users can still complete the execution of the process according to the stated authorizations and authorization constraints. We present RBAC-WS …
Filed under Tech by admin
September 1, 2011
BPEL simulation of WMO SOA.
A part of the service-oriented architecture of the system for the “Wet Maatschappelijke Ondersteuning” (WMO) is simulated in BPEL. The goal is to provide a testing environment for new components that want to hook up to the WMO SOA. The components in the BPEL file are implemented by Java-based web services that reply to invocations with predefined test data. When one wants to test his or her new component implementation he or she should replace the corresponding web service with their own component. Using the same test data set as the simulation, the tester can now detect functional en semantical errors, without having to burdon the actual up and running SOA with these tests.
Filed under Tech by admin