UML-SOA-Sec and Saleem's MDS Services Composition Framework for Secure Business Process Modelling of Services Oriented Applications

• Main Author: SALEEM, MUHAMMAD OAISER
• Format: Thesis
• Language: English
• Published: 2013
• Subjects: T Technology (General)
• Online Access: http://utpedia.utp.edu.my/15280/1/2013%20-UML-SOA-SEC%20and%20Saleem%27s%20MDS%20Services%20Composition%20Framework%20For%20Secure%20Business%20Process%20Mod.pdf; http://utpedia.utp.edu.my/15280/

In Service Oriented Architecture (SOA) environment, a software application is a composition of services, which are scattered across enterprises and architectures. Security plays a vital role during the design, development and operation of SOA applications. However, analysis of today's software development approaches reveals that the engineering of security into the system design is often neglected. Security is incorporated in an ad-hoc manner or integrated during the applications development phase or administration phase or out sourced. SOA security is cross-domain and all of the required information is not available at downstream phases. The post-hoc, low-level integration of security has a negative impact on the resulting SOA applications. General purpose modeling languages like Unified Modeling Language (UML) are used for designing the software system; however, these languages lack the knowledge of the specific domain and "security" is one of the essential domains. A Domain Specific Language (DSL), named the "UML-SOA-Sec" is proposed to facilitate the modeling of security objectives along the business process modeling of SOA applications. Furthermore, Saleem's MDS (Model Driven Security) services composition framework is proposed for the development of a secure web service composition.