Skip to Main content Skip to Navigation
Theses

Synthèse et compilation de services web sécurisés

Abstract : Automatic composition of web services is a challenging task. Many works have considered simplified automata models that abstract away from the structure of messages exchanged by the services. For the domain of secured services we propose a novel approach to automated composition of services based on their security policies. Given a community of services and a goal service, we reduce the problem of composing the goal from services in the community to a security problem where an intruder we call mediator should intercept and redirect messages from the service community and a client service till reaching a satisfying state. We have implemented the algorithm in AVANTSSAR Platform and applied the tool to several case studies. Then we present a tool that compiles the obtained trace describing the execution of a the mediator into its corresponding runnable code. For that we first compute an executable specification as prudent as possible of her role in the orchestration. This specification is expressed in ASLan language, a formal language designed for modeling Web Services tied with security policies. Then we can check with automatic tools that this ASLan specification verifies some required security properties such as secrecy and authentication. If no flaw is found, we compile the specification into a Java servlet that can be used by the mediatior to lead the orchestration
Document type :
Theses
Complete list of metadata

Cited literature [48 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/tel-01746282
Contributor : Thèses Ul <>
Submitted on : Thursday, March 29, 2018 - 10:30:05 AM
Last modification on : Tuesday, April 24, 2018 - 1:53:20 PM
Long-term archiving on: : Thursday, September 13, 2018 - 12:20:38 PM

File

SCD_T_2011_0123_MEKKI.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : tel-01746282, version 1

Collections

Citation

Mohamed-Anis Mekki. Synthèse et compilation de services web sécurisés. Autre [cs.OH]. Université Henri Poincaré - Nancy 1, 2011. Français. ⟨NNT : 2011NAN10123⟩. ⟨tel-01746282⟩

Share

Metrics

Record views

103

Files downloads

169