Search

Abstract: Web services providing E-commerce capabilities to support business transactions over the Internet are more and more widespread. The development of such services involves several security issues ranging from authentication to the management of the access to shared resources according to a given business model. The capability of validating designs against fast evolving requirements is of paramount importance for the adaptation of business models to changing regulations and rapidly evolving market needs. So, techniques for the specification and automated analysis of web services to be used in security-sensitive applications are crucial in the development of these systems. In this paper, we propose an extension of the relational transducers introduced by Abiteboul, Vianu, Fordham, and Yesha for the specification of the transaction protocols of web services and their security properties. We investigate the decidability of relevant verification problems such as goal reachability (for the validation of use-case scenarios) and log validation (for detecting frauds) and provide sufficient conditions for their decidability. The extension we propose is two-fold. First, we add constraints to specify the algebraic structure of the resources manipulated by the transducers. Second, recursion is allowed (only) in policy rules to express important policy idioms such as delegation. Technically, decidability is obtained by a reduction to a decidable class of first-order formulae and fix-point computation to handle recursion. [Copyright &y& Elsevier]

SONET/SDH systems have been the preferred transport technology over fiber optics for almost two decades now. Carriers have developed extensive expertise in operating, managing, and developing business models for these systems. Manufacturers' technical expertise in such systems has increased to a deep understanding of what transport over fiber is about. In short, SONET/SDH can be called a mature transport technology. Out of this mature expertise, new techniques for bettering transport over fiber services have appeared. These techniques are likely to considerably reshape the next generation of SONET/SDH systems in many aspects: new transport techniques, new transport services, new management systems and business models. We describe several new transport techniques, and discuss their impact on the creation of new transport services for next-generation SONET/SDH systems [ABSTRACT FROM PUBLISHER]