保持隐私信息流安全性的服务组合演化方法

彭焕峰; 黄志球; 刘林源; 李勇; 范大娟; 王雨晴

doi:10.1631/FITEE.1700359

Your Location：

Home >

Browse articles >

保持隐私信息流安全性的服务组合演化方法

常规文章 | Updated：2022-05-19

- 保持隐私信息流安全性的服务组合演化方法
- Preserving privacy information flow security in composite service evolution
- 信息与电子工程前沿（英文） 2018年19卷第5期页码：626-638
- Affiliations：
  
  College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China
  College of Computer Engineering, Nanjing Institute of Technology, Nanjing 211167, China
  College of Technology, Nanjing Audit University, Nanjing 210029, China
  Software Engineering Research Unit, University of Oulu, Oulu 90029, Finland
- Author bio：
  
  [ "Huan-feng PENG, E-mail: penghf@njit.edu.cn" ]
  Zhi-qiu HUANG, E-mail:zqhuang@nuaa.edu.cn
- Funds：
  
  Project supported by the National Natural Science Foundation of China (Nos. 61562087 and 61772270), the National High-Tech R&D Program (863) of China (No. 2015AA015303), the Natural Science Foundation of Jiangsu Province, China (No. BK20130735), the Universities Natural Science Foundation of Jiangsu Province, China (No. 13KJB520011), and the Science Foundation of Nanjing Institute of Technology, China (No. YKJ201420)
- DOI：10.1631/FITEE.1700359
  中图分类号： TP309
- 收稿：2017-06-06，
  
  修回：2018-;5-10，
  
  纸质出版：2018-05
- Accepted：
Scan QR Code
彭焕峰, 黄志球, 刘林源, 等. 保持隐私信息流安全性的服务组合演化方法[J]. 信息与电子工程前沿（英文）, 2018,19(5):626-638.

Huan-feng PENG, Zhi-qiu HUANG, Lin-yuan LIU, et al. Preserving privacy information flow security in composite service evolution[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(5): 626-638.
彭焕峰, 黄志球, 刘林源, 等. 保持隐私信息流安全性的服务组合演化方法[J]. 信息与电子工程前沿（英文）, 2018,19(5):626-638. DOI： 10.1631/FITEE.1700359.

Huan-feng PENG, Zhi-qiu HUANG, Lin-yuan LIU, et al. Preserving privacy information flow security in composite service evolution[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(5): 626-638. DOI： 10.1631/FITEE.1700359.

摘要

隐私信息流安全的服务组合部署后，用户隐私需求与成员服务的信誉度等级均可能发生变化，保持隐私信息流安全性是非常重要的演化需求。提出一种保持隐私信息流安全性的服务组合演化方法。分析基于Petri网的隐私数据项依赖关系，计算各成员服务的隐私数据使用集及安全范围，最后提出保持隐私信息流安全性的演化操作集。通过操作实施演化，避免演化后隐私信息流安全性的完整验证过程，提高演化效率。通过实例分析说明该方法的有效性，并对其性能进行实验分析。结果表明，与完整安全性验证过程相比，该方法有较高演化效率，能大大降低演化代价。

Abstract

After a composite service is deployed

user privacy requirements and trust levels of component services are subject to variation. When the changes occur

it is critical to preserve privacy information flow security. We propose an approach to preserve privacy information flow security in composite service evolution. First

a privacy data item dependency analysis method based on a Petri net model is presented. Then the set of privacy data items collected by each component service is derived through a privacy data item dependency graph

and the security scope of each component service is calculated. Finally

the evolution operations that preserve privacy information flow security are defined. By applying these evolution operations

the re-verification process is avoided and the evolution efficiency is improved. To illustrate the effectiveness of our approach

a case study is presented. The experimental results indicate that our approach has high evolution efficiency and can greatly reduce the cost of evolution compared with re-verifying the entire composite service.

关键词

Keywords

references

R Accorsi , , , A Lehmann , , , N Lohmann . . Information leak detection in business process models: theory, application, and tool support . . Inform Syst , , 2015 . . 47 244 - - 257 . . DOI: 10.1016/j.is.2013.12.006 http://doi.org/10.1016/j.is.2013.12.006 . .

KA Alam , , , R Ahmad , , , A Akhunzada , , , 等 . . Impact analysis and change propagation in service-oriented enterprises: a systematic review . . Inform Syst , , 2015 . . 54 43 - - 73 . . DOI: 10.1016/j.is.2015.06.003 http://doi.org/10.1016/j.is.2015.06.003 . .

V Andrikopoulos , , , S Benbernou , , , MP Papazoglou . . On the evolution of services . . IEEE Trans Softw Eng , , 2012 . . 38 ( ( 3 ): ): 609 - - 628 . . DOI: 10.1109/TSE.2011.22 http://doi.org/10.1109/TSE.2011.22 . .

J Bacon , , , D Eyers , , , TFJM Pasquier , , , 等 . . Information flow control for secure cloud computing . . IEEE Trans Netw Serv Manag , , 2014 . . 11 ( ( 1 ): ): 76 - - 89 . . DOI: 10.1109/TNSM.2013.122313.130423 http://doi.org/10.1109/TNSM.2013.122313.130423 . .

DE Bell , , , LJ LaPadula . . Secure computer systems: mathematical foundations . . Technical Report, No. 2547. MITRE Corporation, Massachusetts, USA , , 1973 . . .

M Bishop . . Computer Security: Art and Science . . Addison Wesley, New Jersey, US , , 2002 . . .

DE Denning . . A lattice model of secure information flow . . Commun ACM , , 1976 . . 19 ( ( 5 ): ): 236 - - 243 . . DOI: 10.1145/360051.360056 http://doi.org/10.1145/360051.360056 . .

M Fokaefs , , , R Mikhaiel , , , N Tsantalis , , , 等 . . An empirical study on web service evolution . . 9 th IEEE Int Conf on Web Services , , 2011 . . p.49 - - 56 . . DOI: 10.1109/ICWS.2011.114 http://doi.org/10.1109/ICWS.2011.114 . .

K Knorr . . Multilevel security and information flow in Petri net workflows . . 9 th Int Conf on Telecommunication Systems , , 2001 . . p.613 - - 615 . . . .

C Liu , , , H Duan , , , Q Zeng , , , 等 . . Towards comprehensive support for privacy preservation cross-organization business process mining . . IEEE Trans Serv Comput, in press , , 2016 . . DOI: 10.1109/TSC.2016.2617331 http://doi.org/10.1109/TSC.2016.2617331 . .

G Liu , , , W Reisig , , , C Jiang , , , 等 . . A branching-processbased method to check soundness of workflow systems . . IEEE Access , , 2016 . . 4 4104 - - 4118 . . DOI: 10.1109/ACCESS.2016.2597061 http://doi.org/10.1109/ACCESS.2016.2597061 . .

L Liu , , , H Zhu , , , Z Huang . . Analysis of the minimal privacy disclosure for web services collaborations with role mechanisms . . Expert Syst Appl , , 2011 . . 38 ( ( 4 ): ): 4540 - - 4549 . . DOI: 10.1016/j.eswa.2010.09.128 http://doi.org/10.1016/j.eswa.2010.09.128 . .

N Lohmann , , , P Massuthe , , , C Stahl , , , 等 . . Analyzing interacting BPEL processes . . 4 th Int Conf on Business Process Management , , 2006 . . p.17 - - 32 . . DOI: 10.1007/11841760_3 http://doi.org/10.1007/11841760_3 . .

HF Peng , , , ZQ Huang , , , LY Liu , , , 等 . . Static analysis method of secure privacy information flow for service composition . . J Softw, in press , , 2017 . . .

SS Qi , , , BX Li , , , CC Liu , , , 等 . . A trust impact analysis model for composite service evolution . . 19 th IEEE AsiaPacific Software Engineering Conf , , 2012 . . p.73 - - 78 . . DOI: 10.1109/APSEC.2012.30 http://doi.org/10.1109/APSEC.2012.30 . .

W She , , , IL Yen , , , B Thuraisingham , , , 等 . . Rule-based run-time information flow control in service cloud . . 9 th IEEE Int Conf on Web Services , , 2011 . . p.524 - - 531 . . DOI: 10.1109/ICWS.2011.35 http://doi.org/10.1109/ICWS.2011.35 . .

W Song , , , XX Ma , , , SC Cheung , , , 等 . . Preserving data flow correctness in process adaptation . . 7 th IEEE Int Conf on Services Computing , , 2010 . . p.9 - - 16 . . DOI: 10.1109/SCC.2010.24 http://doi.org/10.1109/SCC.2010.24 . .

W Tan , , , YS Fan , , , MC Zhou . . A Petri net-based method for compatibility analysis and composition of web services in business process execution language . . IEEE Trans Autom Sci , , 2009 . . 6 ( ( 1 ): ): 94 - - 106 . . DOI: 10.1109/TASE.2008.916747 http://doi.org/10.1109/TASE.2008.916747 . .

WMP van der Aalst . . Verification of workflow nets . . 18 th Int Conf on Application and Theory of Petri Nets , , 1997 . . p.407 - - 426 . . DOI: 10.1007/3-540-63139-9_48 http://doi.org/10.1007/3-540-63139-9_48 . .

SY Wang , , , MAM Capretz . . A dependency impact analysis model for web services evolution . . 7 th IEEE Int Conf on Web Services , , 2009 . . p.359 - - 365 . . DOI: 10.1109/ICWS.2009.62 http://doi.org/10.1109/ICWS.2009.62 . .

SY Wang , , , MAM Capretz . . Dependency and entropy based impact analysis for service-oriented system evolution . . 10 th IEEE/WIC/ACM Int Conf on Web Intelligence and Intelligent Agent Technology , , 2011 . . p.412 - - 417 . . DOI: 10.1109/WI-IAT.2011.196 http://doi.org/10.1109/WI-IAT.2011.196 . .

Y Wang , , , Y Wang . . A survey of change management in service-based environments . . Serv Orient Comput Appl , , 2013 . . 7 ( ( 4 ): ): 259 - - 273 . . DOI: 10.1007/s11761-013-0128-4 http://doi.org/10.1007/s11761-013-0128-4 . .

Y Wang , , , J Yang , , , WL Zhao , , , 等 . . Change impact analysis in service-based business processes . . Serv Orient Comput Appl , , 2012 . . 6 ( ( 2 ): ): 131 - - 149 . . DOI: 10.1007/s11761-011-0093-8 http://doi.org/10.1007/s11761-011-0093-8 . .

N Xi , , , C Sun , , , JF Ma , , , 等 . . Secure service composition with information flow control in service clouds . . Fut Gener Comput Syst , , 2015 . . 49 142 - - 148 . . DOI: 10.1016/j.future.2014.12.009 http://doi.org/10.1016/j.future.2014.12.009 . .

WY Yu , , , CG Yan , , , ZJ Ding , , , 等 . . Modeling and validating e-commerce business process based on Petri nets . . IEEE Trans Syst Man Cybern Syst , , 2014 . . 44 ( ( 3 ): ): 327 - - 341 . . DOI: 10.1109/TSMC.2013.2248358 http://doi.org/10.1109/TSMC.2013.2248358 . .

WY Yu , , , CG Yan , , , ZJ Ding , , , 等 . . Modeling and verification of online shopping business processes by considering malicious behavior patterns . . IEEE Trans Autom Sci Eng , , 2016 . . 13 ( ( 2 ): ): 647 - - 662 . . DOI: 10.1109/TASE.2014.2362819 http://doi.org/10.1109/TASE.2014.2362819 . .

J Zeng , , , HL Sun , , , XD Liu , , , 等 . . PRV: an approach to process model refactoring in evolving process-aware information systems . . 7 th IEEE Int Conf on Services Computing , , 2010 . . p.441 - - 448 . . DOI: 10.1109/SCC.2010.19 http://doi.org/10.1109/SCC.2010.19 . .

W Zeng , , , M Koutny , , , P Watson , , , 等 . . Formal verification of secure information flow in cloud computing . . J Inform Secur Appl , , 2016 . . 27 103 - - 116 . . DOI: 10.1016/j.jisa.2016.03.002 http://doi.org/10.1016/j.jisa.2016.03.002 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Method for process-based modeling of combat scenarios using interaction analysis weapon systems

Using information flow analysis to detect implicit information leaks for web service composition