@inproceedings{8f4e6df2c9ff4df88b50138e596b9f99,
title = "Toward systematic integration of security policies into web services",
abstract = "In this paper, we introduce our approach for the automatic generation of BPEL (Business Process Execution Language) aspects from security policies. It is based on a synergy between policies, Aspect-Oriented Programming (AOP) and composition of web services. Our proposed approach allows first to transform security policies into BPEL aspects. Then, the generated aspects are weaved in the BPEL process of the composed web services at runtime [1]. The main contributions of our approach are: (1) Describing dynamic security policies, (2) generating automatically the BPEL aspects, (3) separating the business and security concerns of composite web services, and hence developing them separately (4) allowing the modification of the dynamic security features and web services composition at run time and (5) providing modularity for modeling cross-cutting concerns between web services.",
keywords = "AOP, BPEL, RBAC, Security policies, Web services security",
author = "Azzam Mourad and Hadi Otrok and Sara Ayoubi",
year = "2011",
doi = "10.1109/EISIC.2011.48",
language = "British English",
isbn = "9780769544069",
series = "Proceedings - 2011 European Intelligence and Security Informatics Conference, EISIC 2011",
pages = "220--223",
booktitle = "Proceedings - 2011 European Intelligence and Security Informatics Conference, EISIC 2011",
note = "2011 1st European Intelligence and Security Informatics Conference, EISIC 2011 ; Conference date: 12-09-2011 Through 14-09-2011",
}