In this paper, we present an approach to solve the problem of provably secure execution of semantic web service composition plans. The integrated components of this approach include our OWL-S service matchmaker, OWLSMX, the service composition planner, OWLS-XPlan, and the security checker module for formally verifying the compliance of the created composition plan to be executed with given data...

According to increasing use of internet, the security of network connection between web server and client is equal concern to both parties. Such risks of network security are eavesdropping, fraud, interception and so on. Therefore it is important to protect data from/to internet data. In special, there are two types of internet security, one is network security, the other is data security. Data...

This paper considers the authorization service requirements for the service oriented architecture and proposes an authorization architecture for Web services. It describes the architectural framework, the administration and runtime aspects of our architecture and its components for secure authorization of Web services as well as the support for the management of authorization information. The p...

The rich nature of modern Web services and the emerging “mash-up” programming model, make it difficult to predict the potential interactions and usage scenarios that can emerge. Moreover, while the potential security implications for individual client browsers have been widely internalized (e.g., XSS, CSRF, etc.) there is less appreciation of the risks posed in the other direction— of user abus...

Some solutions have been proposed to deal with the establishment of Web service relationships. For instance, a consortium has developed the Web Services Trust Language (WS-Trust) that offers a trust model for Web services. However, trust is one aspect in a set of aspects involved in Web service security that includes, for instance, privacy preservation. Based on this fact, the goal of this pape...

This paper considers the web service environment for Telco applications, as defined recently by the ParlayX Working Group within the Parlay organisation. These services include messaging, location, payment, call control, presence, group management, etc. and open the way to rapid service creation and integration with internet applications. However, some vital issues for the telecommunications in...

Security in grid environments that are built using Service Oriented Architecture (SOA) technologies is a great challenge. On one hand, the great diversity in security technologies, mechanisms and protocols that each organization follows and on the other hand, the different goals and policies that these organizations adopt, comprise a complex security environment. Authenticating and authorizing ...

Many Data Grid services maintain persistent metadata in remote relational databases. However, existing relational database systems are neither grid enabled nor web service enabled, adversely affecting cross-organizational interoperability and reuse. The European Data Grid’s Data Management Work Package addresses these issues with Spitfire. The Spitfire service gridenables a wide range of relati...

Recent work has begun exploring the characterization and utilization of provenance in systems based on the Service Oriented Architecture (such as Web Services and Grid based environments). One of the salient issues related to provenance use within any given system is its security. Provenance presents some unique security requirements of its own, which are additionally dependent on the architect...

In this paper the design and implementation of fault tolerable architecture for scientific workflow engines is presented. The engines are assumed to be implemented as composite web services. Current architectures for workflow engines do not make any considerations for substituting faulty web services with correct ones at run time. The difficulty is to rollback the execution state of the workflo...