Verifying Security of Composed Interaction for Web Services.

Xiaolie Ye,Lejian Liao
DOI: https://doi.org/10.4304/jsw.4.10.1160-1168
2009-01-01
Journal of Software
Abstract:SOAP-based c omplex interactions of multiple end points in Web Services mostly consist of sub-processes or sub-protocols, which are reused as modul es and need to comply with corresponding standards and proposals. However, the consistency of local and global properties of interactions is important for practical applications with high security requirement . Therefore, a method is proposed to formally describe composed interactions by the definition of basic and composed interaction model s for Web Services. Furthermore, the semantic of interactions, is presented as a path of transitions in Action-based Kripke Transition System, on which some properties , such as secrecy and authentication , are described and verified as formulae in Past Linear Temporal Logic . Then a scenario of composed interactions for Web Services is given and some formal properties corresponding to security are more effectively checked by our approach .
What problem does this paper attempt to address?