Com a tendência de aumento do uso de tecnologias móveis conectadas à web, é comum que empresas (provedores) provejam seus serviços na web para que possam atender requisições de usuários em diversas situações. Muitas vezes é necessário que serviços de dois ou mais provedores sejam compostos automaticamente para que uma única requisição de usuário seja atendida no momento imediatamente anterior à execução do serviço: é a composição automática de serviços. Quando uma composição de serviços é executada, ela está automatizando um processo de negócio relativo à requisição do usuário. O objetivo dessa pesquisa é contribuir com um modelo arquitetural de sistema básico de composição automática de serviços baseado em semântica. Este modelo contempla a utilização de similaridade entre conceitos de uma ontologia de um domínio específico, desta maneira possibilitando que uma mesma requisição de um usuário possa ser atendida de diversas maneiras distintas e com serviços heterogêneos. A proposta é validada através de um protótipo em software e a experimentação é aplicada no domínio do turismo. / With the trend towards increased use of mobile technologies over the web, companies (providers) have been increasingly providing their services on the web to fulfill user requests in various situations. It is often necessary that two or more services from different providers are automatically composed in order to meet a single user request at the moment immediately previous to the service execution: this is called automatic composition of services. The objective of this research is to contribute with a semantics based automatic composition model that uses similarity between concepts of an ontology to generate alternative business processes, thus enabling a single user request to be met in several different ways using heterogeneous services. The proposal is validated through a software prototype and the experimentation is applied in the tourism domain.

Short time-to-bug localization is extremely important for any 24x7 service-oriented application. To this end, we introduce a new debugging paradigm called live debugging. There are two goals that any live debugging infrastructure must meet: Firstly, it must offer real-time insight for bug diagnosis and localization, which is paramount when errors happen in user-facing applications. Secondly, live debugging should not impact user-facing performance for normal events. In large distributed applications, bugs which impact only a small percentage of users are common. In such scenarios, debugging a small part of the application should not impact the entire system. With the above-stated goals in mind, this thesis presents a framework called Parikshan, which leverages user-space containers (OpenVZ) to launch application instances for the express purpose of live debugging. Parikshan is driven by a live-cloning process, which generates a replica (called debug container) of production services, cloned from a production container which continues to provide the real output to the user. The debug container provides a sandbox environment, for safe execution of monitoring/debugging done by the users without any perturbation to the execution environment. As a part of this framework, we have designed customized-network proxies, which replicate inputs from clients to both the production and test-container, as well safely discard all outputs. Together the network duplicator, and the debug container ensure both compute and network isolation of the debugging environment. We believe that this piece of work provides the first of its kind practical real-time debugging of large multi-tier and cloud applications, without requiring any application downtime, and minimal performance impact.

Com a tendência de aumento do uso de tecnologias móveis conectadas à web, é comum que empresas (provedores) provejam seus serviços na web para que possam atender requisições de usuários em diversas situações. Muitas vezes é necessário que serviços de dois ou mais provedores sejam compostos automaticamente para que uma única requisição de usuário seja atendida no momento imediatamente anterior à execução do serviço: é a composição automática de serviços. Quando uma composição de serviços é executada, ela está automatizando um processo de negócio relativo à requisição do usuário. O objetivo dessa pesquisa é contribuir com um modelo arquitetural de sistema básico de composição automática de serviços baseado em semântica. Este modelo contempla a utilização de similaridade entre conceitos de uma ontologia de um domínio específico, desta maneira possibilitando que uma mesma requisição de um usuário possa ser atendida de diversas maneiras distintas e com serviços heterogêneos. A proposta é validada através de um protótipo em software e a experimentação é aplicada no domínio do turismo. / With the trend towards increased use of mobile technologies over the web, companies (providers) have been increasingly providing their services on the web to fulfill user requests in various situations. It is often necessary that two or more services from different providers are automatically composed in order to meet a single user request at the moment immediately previous to the service execution: this is called automatic composition of services. The objective of this research is to contribute with a semantics based automatic composition model that uses similarity between concepts of an ontology to generate alternative business processes, thus enabling a single user request to be met in several different ways using heterogeneous services. The proposal is validated through a software prototype and the experimentation is applied in the tourism domain.

In today’s volatile business environments, collaboration between information systems, both within and across company borders, has become essential to success. An efficient supply chain, for example, requires the collaboration of distributed and heterogeneous systems of multiple companies. Developing such collaborative applications and building the supporting information systems poses several engineering challenges. A key challenge is to manage the ever growing design complexity. In this article, we argue that software architecture should play a more prominent role in the development of collaborative applications. This can help to better manage design complexity by modularizing collaborations and separating concerns. State of the art solutions, however, often lack proper abstractions for modeling collaborations at architectural level or do not reify these abstractions at detailed design and implementation level. Developers, on the other hand, rely on middleware, business process management, and Web services, techniques that mainly focus on low-level infrastructure. To address the problem of managing the design complexity of collaborative applications, we present Macodo. Macodo consists of three complementary parts: (1) a set of abstractions for modeling adaptive collaborations, (2) a set of architectural views, the main contribution of this article, that reify these abstractions at architectural level, and (3) a proof of concept middleware infrastructure that supports the architectural abstractions at design and implementation level. We evaluate the architectural views in a controlled experiment. Results show that the use of Macodo can reduce fault density and design complexity, and improve reuse and productivity. The main contributions of this article are illustrated in a supply chain management case.

Service-oriented architecture (SOA) approach has become the mainstream of today¡¦s systems development technique. The Unified Modeling Language (UML) is becoming the major tool for modeling the platform independent model (PIM) of a SOA system. Once the PIM is constructed, the results can then be transformed into its platform specific model based on the model driven architecture (MDA) approach and a specific platform. To develop a SOA system, the developer can then use the platform and choose the proper components to construct services and then business processes. However, the detailed guideline for this type of construction based on a specific platform is lacking. Therefore, this study presents a methodology which provides guidelines for the construction from components, service to business process for a SOA system based on the IBM WebSphere platform. The research methodology is articulated using the design science research methodology. A usability evaluation with a hypothesized case is performed to demonstrate its applicability. The results indicated that with this proposed method, the system developer can effectively use the IBM WebSphere platform to construct the business process based on the PIM of a SOA system.

<p>Detta examensarbete behandlar Service Oriented Architecture (SOA) och dess implementeringar Jini och Web services. SOA beskriver hur applikationsintegration mellan olika plattformar skall ske och innebär att applikationer designas som tjänster för att enkelt integreras med andra applikationer. Dynamisk lokalisering av tjänster via en registertjänst används för att applikationer skall finna andra applikationer. Vi designar och implementerar en mekanism i Web services som gör det möjligt att byta en tjänst under exekvering. Ett sådant byte kan vara intressant av två skäl, tjänster kan registreras utan att vara tillgängliga, eller att det uppstår ett fel under exekvering som gör att tjänsten blir otillgänglig.</p> / <p>This degree project is about Service Oriented Architecture (SOA) and its implementations Jini and Web services. SOA is a description of how application integration between different platforms can be carried out by designing applications as services, which implies an easier integration with other applications. Dynamic location of services is carried out by consultation with a register service so that applications can find other applications. We design and implement a mechanism in Web services that makes it possible to change service during execution. A change of service can be interesting for two reasons, the service might be registered but not available or there might be some sort of fault during execution that makes the service unavailable.</p>

published_or_final_version / Computer Science / Doctoral / Doctor of Philosophy

As in any organizational development, it is essential that we have the means for measuring progress towards a net-centric environment. Unless we know how to measure progress, we will not be able to take necessary corrective actions required to ensure success. This thesis work portrays the effective use of certain metrics such as Net-centric Service oriented architecture, Net-centric performance management and Net-centric reputation, which enables and enhances the reconfiguration of traditional organizations moving towards the net-centric way of functioning.

Orientador: Ricardo Dahab / Dissertação (mestrado) - Universidade Estadual de Campinas, Instituto de Computação / Made available in DSpace on 2018-08-09T12:13:53Z (GMT). No. of bitstreams: 1 Rocha_ClaudioAparecido_M.pdf: 744056 bytes, checksum: a1834faf6f8c7f59d5e2b775c639537e (MD5) Previous issue date: 2006 / Resumo: A indústria desenvolvedora de software vem promovendo a Arquitetura Orientada a Serviços (SOA) como sendo um novo marco no processo evolutivo de desenvolvimento de software. Segundo o Gartner Group, estima-se que a arquitetura SOA estará presente em grande parte dos novos desenvolvimentos de software ate o ano de 2008. Portanto, nesse processo evolutivo o estilo de arquitetar, desenvolver e implementar novos processos de negócios e aplicações serão fortemente influenciados pela arquitetura SOA. Arquiteturas tradicionais se tornaram mais complexas, caras, difíceis de gerenciar e desafiadoras nos aspectos de integração, interoperabilidade e segurança. Como alternativa, surge a arquitetura SOA que promete reduzir custos integrando plataformas heterogêneas e reutilizando linhas de códigos já existentes, proporcionando assim agilidade na melhoria e ou geração de novos negócios. A arquitetura SOA também tem seus desafios, talvez o maior deles seja disponibilizar mecanismos de seguranças adequados para cada tipo de negócio proporcionado por ela. Por exemplo, os processos de negócios baseados na arquitetura SOA tendem a ser diferentes dos processos de negócios baseados em arquitetura tradicionais, em conseqüência disso novos requisitos de segurança surgem e as vezes demandam mecanismos de segurança alternativos aos já existentes. A arquitetura SOA esta de certa forma refém da capacidade de prover mecanismos de segurança adequados e principalmente interoperabilidade entre esses mecanismos. Esses são pelo menos os desafios mais relevantes que a arquitetura SOA tem pela frente antes de se tornar de fato uma arquitetura completa. Alias, o sucesso da Arquitetura Orientada a Serviço (principalmente serviços baseados em Web Services) esta totalmente dependente do sucesso na utilização dos mecanismos de segurança disponíveis. Essa dissertação tem o propósito de discutir e avaliar as características básicas da Arquitetura Orientada a Serviços e os novos requisitos de seguranças gerados pelos processos de negócios. A capacidade de interoperabilidade entre os mecanismos de segurança atuais e os novos mecanismos desenvolvidos para arquitetura SOA também fazem parte dessa dissertação / Abstract: The software industry is promoting Service Oriented Architecture (SOA) as a new starting point of the evolutionary process of software development. Based on estimations from the Gartner Group, by 2008, most of the software development initiatives will be SOA-based. Hence, in this evolutionary process, SOA will be a strong influence in the design, development and implementation of new business processes and applications. Traditional architectures became more complex, expensive, difficult to manage and challenging, with respect to the aspects of integration, interoperability and security. As an alternative, SOA architecture offers easy and cost-effective integration of heterogeneous platforms and the reuse of existing source code, with direct consequences in the dynamism of business. SOA architecture also has its challenges: perhaps making available an adequate security mechanism for each type of business could be considered one of them. For instance, business processes based on SOA architecture usually are different from traditional business processes; therefore, new security requirements need to be addressed by security mechanisms, usually different from traditional ones. SOA architecture is heavily tied with security mechanisms; providing interoperability between systems implies in finding a good coupling of different security mechanism, without losing the advantages provided by the architecture. Thus, these challenges have to be met before SOA becomes a complete architecture. In fact, the success of Services Oriented Architecture (mainly Web Services) is totally dependent on the success of its security mechanisms. The objective of this dissertation is to discuss and evaluate the basic characteristics of the SOA architecture and the security requirements of business processes. The interoperability between traditional security mechanisms and the new security mechanisms of the SOA architecture are also covered by this dissertation / Mestrado / Engenharia de Computação / Mestre em Computação

M.Tech. / Threats to information assets have increased significantly since the adoption of Service Oriented Architecture (SOA). Gone are the days when organisations could just secure the perimeter of their applications. The study adopted a threat vulnerability control framework and game theory as a theoretical lens. It investigated the various facets behind decision making under uncertainty in SOA and the perceived industry best practices. Game theory is a way to model complex SOA security interactions under uncertainty. Intelligent attackers require intelligent analysis. Game theory helps us implement strategies that take into account the attackers’ intentions since it can be applied in situations of uncertainty. The data was collected primarily through semi structured interviews at a Top I.T company based in Sandton. Grounded theory techniques were employed as a chief methodology for data analysis...