Made available in DSpace on 2015-03-05T13:56:57Z (GMT). No. of bitstreams: 0 Previous issue date: 6 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / A Internet e o ensino à distância (EAD) possibilitam a configuração de inúmeros cenários de aprendizagem em um mundo globalizado. A união com dispositivos móveis e a grande variedade de softwares educacionais modificam a postura das instituições que implantam ambientes de EAD. O problema deixa de ser "como produzir o software educacional que preciso", para ser "onde encontrar,como compor e como usar o software que necessito". Entretanto, os softwares desenvolvidos para estes ambientes de ensino à distância, apesar de não estarem isolados uns dos outros, ainda são criados com um foco interno. A metodologia de desenvolvimento prevalecente consiste na criação de interfaces diretas, o que obriga os projetistas a especificar, projetar, codificar e depurar programas personalizados para acessarem os dados de um aplicativo, e, então, mapear e converter as respectivas estruturas de dados conforme o necessário, para introduzi-los em outro. Desta forma, cada instância da integração é especializada, a mplementação é c

O uso de Web Services tem aberto novas possibilidades de desenvolvimento de software, entre elas a composição de serviços. A composição de serviços apresenta novas questões no ambiente computacional, entre elas a execução integral, garantindo consistência e contemplando o controle de concorrência. O workflow é um conjunto de tarefas e interações organizadas de modo que forneça uma funcionalidade ao sistema, provendo a automatização de processos complexos, através da composição de serviços. Tal composição deve ser executada de forma transacional, processando as operações com consistência. A execução de workflows oriundos de domínios diferentes, faz com que os serviços que estão sendo utilizados, não possuam ciência do contexto da execução, podendo gerar atendimentos que não sejam justos, causando situações de deadlock e de starvation. Este trabalho apresenta estratégias para a execução de workflows em domínios distintos, que requisitam múltiplos serviços de um mesmo conjunto, sem a necessidade de um coordenador central, de forma transacional. O atendimento a requisição contempla uma política justa na utilização do recurso que impede a ocorrência de deadlock ou de starvation para os workflows em execução. Os experimentos realizados neste trabalho mostram que o sistema desenvolvido, aplicando as estratégias propostas, executa as composições de serviços de maneira transacional, atendendo as requisições com justiça, livre de deadlock e starvation, mantendo o sistema independente e autônomo. / Web Services are increasing software development possibilities, among then service composition. Service composition introduces new issues on computational environment, such as the whole service execution, ensuring consistency and concurrency control. Workflow is a set of organized tasks and interactions in order to provide functionality to the system, automating complex process through composition service. Such composition must be performed by transactional support, performing operations consistently. The workflow execution from different domain clients sharing the same composition make these clients ignore the execution context. It may cause inconsistencies, from unfair attendance to deadlock or starvation. This work depicts strategies for workflow execution from different domains, requesting multiple services from the same composition, without a centralized coordinator, in transactional way. The request attendance contains a fair policy for resource usage and consumption to avoid deadlock and starvation. Applying the proposed strategy on the experiments performed in this work, it confirms that the developed system executes service composition with transactional support, avoiding deadlock or starvation, keeping the whole system autonomous and independent.

Web-based applications and services are increasingly being used in security-sensitive tasks. Current security protocols rely on two crucial assumptions to protect the confidentiality and integrity of information: First, they assume that end-point software used to handle security-sensitive information is free from vulnerabilities. Secondly, these protocols assume point-to-point communication between a client and a service provider. However, these assumptions do not hold true with large and complex vulnerable end point software such as the Internet browser or web services middleware or in web service compositions where there can be multiple value-adding service providers interposed between a client and the original service provider. To address the problem of large and complex end-point software, we present the AppCore approach which uses manual analysis of information flow, as opposed to purely automated approaches, to split existing software into two parts: a simplified trusted part that handles security-sensitive information and a legacy, untrusted part that handles non-sensitive information without access to sensitive information. Not only does this approach avoid many common and well-known vulnerabilities in the legacy software that compromised sensitive information, it also greatly reduces the size and complexity of the trusted code, thereby making exhaustive testing or formal analysis more feasible. We demonstrate the feasibility of the AppCore approach by constructing AppCores for two real-world applications: a client-side AppCore for https-based applications and an AppCore for web service platforms. Our evaluation shows that security improvements and complexity reductions (over a factor of five) can be attained with minimal modifications to existing software (a few tens of lines of code, and proxy settings of a browser) and an acceptable performance overhead (a few percent). To protect the communication of sensitive information between the clients and service providers in web service compositions, we present an end-to-end security framework called WS-FESec that provides end-to-end security properties even in the presence of misbehaving intermediate services. We show that WS-FESec is flexible enough to support the lattice model of secure information flow and it guarantees precise security properties for each component service at a modest cost of a few milliseconds per signature or encrypted field.

The Web turns out to be a collection of services that interoperate through the Internet. As the number of services increase, it is getting more and more diffucult for users to find, filter and integrate these services depending on their requirements. Automatic techniques are being developed to fulfill these tasks. The first step toward automatic composition is the discovery of services needed. UDDI which is one of the accepted web standards, provides a registry of web services. However representation capabilities of UDDI are insufficient to search for services on the basis of what they provide. Semantic web initiatives like OWL and OWL-S are promising for locating exact services based on their capabilities. In this thesis, a new semantic service discovery mechanism is implemented based on OWL-S service profiles. The service profiles of an advertisement and a request are matched based on OWL ontologies describing them. In contrast to previous work on the subject, the ontologies of the advertisement and the request are not assumed to be same. In case they are different, schema matching algorithms are applied. Schema matching algorithms find the mappings between the given schema models. A hybrid combination of semantic, syntactic and structural schema matching algorithms are applied to match ontologies

In this thesis, some novel ideas are presented for solving automated web service composition problem. Some possible real world problems such as partial observability of environment, nondeterministic effects of web services, service execution failures are solved through some mechanisms. In addition to automated web service composition, automated web service invocation task is handled in this thesis by using reflection mechanism. The proposed approach is based on AI planning. Web service composition problem is translated to AI planning problem and a novel AI planner namely &ldquo / Simplanner&rdquo / that is designed for working in highly dynamic environments under time constraints is adapted to the proposed system. World altering service calls are done by conforming to the WS-Coordination and WS-Business Activity web service transaction specifications in order to physically repair failure situations and prevent undesired side effects of aborted web service composition efforts.

Web Service technology is one of the most rapidly developing contemporary technologies. Nowadays, Web Services are being used by a large number of projects and academic studies all over the world. As the use of Web service technology is increasing, it becomes harder to find the most suitable web service which meets the Quality of Service (QoS) as well as functional requirements of the user. In addition, quality of the web services (QoS) that take part in the software system becomes very important. In this thesis, we develop a method to track the QoS primitives of Web Services and an algorithm to automatically calculate QoS values for Web Services. The proposed method is realized within a domain specific web service discovery system, namely DSWSD-S, Domain Specific Web Service Discovery with Semantics. This system searches the Internet and finds web services that are related to a domain and calculates QoS values through some parameters. When a web service is queried, our system returns suitable web services with their QoS values. How to calculate, keep track of and store QoS values constitute the main part of this study.

<p>Background: With Web service growing popularity more and more companies chose to apply Web service in their organisation. With the rising usage of the concept the demands rise with it. For companies that deal with vulnerable information for example hospitals, there needs to be strong security measures taken.</p><p>Purpose: The aim of the report is to examine different security functions that can help developers to secure Web service applications. The report will be written so that organisations such as health care organisation can get insight on how to use a secure Web services in their line of work.</p><p>Method: One of the main methods used in this report is a qualitative hermeneutic way of thinking. The research process will apply Wallace’s model. The theoretical study is achieved with research on the subject through literature studies and published articles. Interviews that are used to gain knowledge are structured as quality orientated science surveys with semistandardised questions.</p><p>Conclusions: We believe the time has come for hospitals to investigate if Web service can help their organization. In case they choose to use Web services, we advise them to follow Web service Security’s recommendations to produce a web service that is adapted to their security needs.</p>

Denna rapport handlar om utveckling av administratörsfunktioner för applikationen QuickPick som är ett värdesystem för ett lager. I dagsläget finns det inga funktioner för användaren att sortera, gruppera eller filtrera vyinställningar i applikationen. De som använder systemet får kontakta Qsys Sverige AB, där detta uppdrag är utfört, för att ändra vyinställningar manuellt. Rapporten behandlar teori om hur ett lager är uppbyggt, hur man programmerar på ett generellt sätt så att det blir enklare att fortsätta utveckla funktionen. Teorin behandlar också hur man på ett användarvänligt sätt skapar ett system för en administratör.Funktionerna kommer att finnas i en webbportal tillgänglig för administratören och är utvecklat i C# och ASP.NET. Resultatet av rapporten är fungerande administratörsfunktioner för vyinställningar i en webbportal som kan användas i QuickPick applikationen. / This thesis is about development of administrative functions for the application QuickPick, which is a value system for warehouses. Today, there are no functions for the user to sort, group or filter the view settings in the application. Those who use the system need to contact Qsys Sverige AB to make this changes. Where also this thesis has been performed. The thesis deals theoretically with how a warehouse works, how you program in a general way, so it will be easier to continue the development of the functions and make a user friendly system for an administrator. The new functions will be available in a web-portal for administrators and it has been developed in C# and ASP.NET. The result of the thesis will be administrative functions for the view settings in a web-portal which can be used in the QuickPick application.

Orientador: Edmundo Roberto Mauro Madeira / Dissertação (mestrado) - Universidade Estadual de Campinas, Instituto de Computação / Made available in DSpace on 2018-08-09T05:05:03Z (GMT). No. of bitstreams: 1 Nakai_AlanMassaru_M.pdf: 7384395 bytes, checksum: 7ae9dd61b3367851a744bc93622be309 (MD5) Previous issue date: 2007 / Resumo: Uma cadeia produtiva é definida como o conjunto de atividades envolvidas na criação, transformação e distribuição de um produto, da matéria-prima ao consumidor final. Os participantes da cadeia produtiva podem trabalhar de forma integrada, com o objetivo de otimizar o desempenho coletivo, aumentando sua competitividade comercial. Do ponto de vista tecnológico, a natureza distribuída, autônoma e heterogênea dos participantes da cadeia produtiva dificultam a automação dos seus processos de negócio interorganizacionais. Este trabalho propõe uma infra-estrutura baseada em coreografias de serviços Web para coordenar as atividades que compõem os processos de negócio interorganizacionais das cadeias produtivas. Esta infra-estrutura implementa um modelo de coordenação que visa facilitar o projeto e a implantação dos processos de negócio interorganizacionais. Neste modelo, os processos são representados por coreografias WS-CDL, que são mapeadas para planos de coordenação executáveis descritos em BPEL. O trabalho também apresenta um protótipo da infra-estrutura, com o objetivo de validá-la / Abstract: A supply chain is the set of activities involved in the creation, transformation and distribution of a product, from raw material to the consumer. Supply chain's participants can work in an integrated way to optimize their performance and increase their commercial competitiveness. From the technological point of view, the distributed, autonomous and heterogeneous nature of supply chain's participants raises di±culties when we consider the automation of interorganizational processes. This work proposes an infrastructure based on Web services choreographies for coordination of the activities that compose the interorganizational business processes of the supply chains. This infrastructure implements a coordination model that aims to make easier the design and the deployment of the interorganizational business processes. In this model, processes are represented by WS-CDL choreographies, which are mapped to executable BPEL coordination plans. The work also presents a prototype of the infrastructure to validate it / Mestrado / Sistemas Distribuidos / Mestre em Ciência da Computação

Web API:er i dess olika former är ett vanligt sätt att tillgängliggöra tjänster via webben. Idag är REST den dominerande arkitekturen för utveckling av publika API:er. När flera web services slås samman kallas det för en mashup. Problemet som undersöks är hur flera REST API:er kan slås samman till en mashup. Syftet med det här arbetet är att föreslå en generell arkitektur för mashups vid sammanslagning av REST API:er. Arbetet utfördes som en designundersökning där målet var att ta fram en artefakt i form av en generell arkitektur för mashups av REST API:er. Med hjälp av tidigare forskning togs egenskaper fram som lägger grunden till den nya arkitekturen som föreslagits i det här arbetet. Arkitekturen implementerades som en applikation hos företaget Cygate AB. Arkitekturen utvärderades sedan av Cygate AB med hjälp av fyra kriterier vilka mäter kvalitén på mjukvara. Arkitekturen anses vara av god kvalité enligt den utvärdering som utfördes av Cygate AB. Slutsatsen drogs att arkitekturen är tillämpbar i liknande scenarion där flera REST API:er slås samman i en mashup. / Web APIs in their different shapes and sizes are a common way to make services accessible through the web. Today, the REST architectural style is the dominating approach to develop public APIs. When combining several web services, it is called creating a mashup. The problem explored in this thesis is how several REST APIs can be combined into a mashup. Consequently, the purpose of this thesis is to suggest a generic architecture for mashups combining REST APIs. A design science approach is used in this study to develop an artifact in the form of a generic architecture for mashups of REST APIs. By studying previous research, characteristics and properties are found that represent the basis of the proposed architecture. The architecture is implemented as an application in a real world scenario at Cygate AB. The architecture is, finally, evaluated by Cygate AB through four criteria that measure software quality. The architecture is deemed to be of good quality according to the evaluation performed by Cygate AB. Conclusions can be made that the architecture is applicable in similar scenarios where several REST APIs are combined to a mashup.