NDLI: Contract-Based Security Monitors for Service Oriented Software Architecture

Content Provider	IEEE Xplore Digital Library
Author	Hoole, A.M. Traore, I.
Copyright Year	2008
Description	Author affiliation: Dept. of Electr. & Comput. Eng., Univ. of Victoria, Victoria, BC (Hoole, A.M.; Traore, I.)
Abstract	Monitors have been used for real-time systems to ensure proper behavior; however, most approaches do not allow for the addition of relevant fields required to identify and react to security vulnerabilities. Contracts can provide a useful mechanism for identifying and tracking vulnerabilities. Currently, contracts have been proposed for reliability and formal verification; yet, their use in security is limited. Static analysis methods are able to identify many known vulnerabilities; however, they suffer from a high rate of false-positives. The creation of a mechanism that can verify identified vulnerabilities is therefore warranted. We propose a contract-based security assertion monitoring framework (CB SAMF) for reducing the number of security vulnerabilities that are exploitable. CB SAMF will span multiple software layers and be used in an enhanced systems development life cycle (SDLC) including service-oriented analysis and design (SOAD).
Starting Page	1239
Ending Page	1245
File Size	1094369
Page Count	7
File Format	PDF
ISBN	9780769534732
DOI	10.1109/APSCC.2008.169
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-12-09
Publisher Place	Taiwan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Real time systems Service oriented architecture contracts Runtime Computer displays Software architecture security engineering Intrusion detection Logic Computer security Monitoring Contracts service-oriented architecture monitors
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Modular architecture for real-time contract-based framework

A Runtime Resource-Management Framework for Embedded Service-Oriented Systems

Contract-based security monitors for service oriented software architecture.

A Hardware-based Architecture to Support Flexible Real-Time Parallel Intrusion Detection

Quality Attributes for Service-Oriented Architectures

A Rigorous Model of Contract-Based Service Component Architecture

A prototype real-time intrusion-detection expert system

Solutions for Supporting Composition of Service-Based Real-Time Applications

Intrusion tolerant software architectures

Contract-Based Security Monitors for Service Oriented Software Architecture

Similar Documents

Modular architecture for real-time contract-based framework

A Runtime Resource-Management Framework for Embedded Service-Oriented Systems

Contract-based security monitors for service oriented software architecture.

A Hardware-based Architecture to Support Flexible Real-Time Parallel Intrusion Detection

Quality Attributes for Service-Oriented Architectures

A Rigorous Model of Contract-Based Service Component Architecture

A prototype real-time intrusion-detection expert system

Solutions for Supporting Composition of Service-Based Real-Time Applications

Intrusion tolerant software architectures

Contract-Based Security Monitors for Service Oriented Software Architecture