Towards A Resilient Service-Oriented Computing from Security and Business Perspectives

ABSTRACT

The Service-Oriented Architecture (SOA) offers a promising architectural style that can quickly build up new software applications from loosely-coupled components in distributed and heterogeneous environments. However, in reality, SOA-based applications are subject to frequent failures due to perpetual changes in the environments whereby they operate. Changes are often caused by social-technical events, such as new business and organizational rules, software and hardware failures, and security threats just to mention a few. By such, SOA environments are dynamic and unpredictable, and diminish the guarantees on reliability and availability offered and expected by SOA-based applications. In this presentation, we present a fault-resilience approach to adapt SOA to socio-technical changes with focus on business aspects and information security. The approach relies on dynamic data-driven models with cybernetics loops and an ad-hoc service composition mechanism to dynamically adapt business processes to changes. In particular, we elaborate how models, such as the security risk model the business requirement model, affect and are affected by each other at runtime and design time.