Control Flow Analysis and Coverage Driven Testing for Web Services

본 논문은 웹서비스의 성능 향상을 위해 Servlet 컨테이너를 제거함으로써 전형적인 웹 서비스 구현의 필수 구성요소로 요구되는 SOAP 처리를 향상시킨 모바일 웹 서비스 구조 (SMSP)를 제안한다. HTTP 상에서 SOAP을 존재하게 하여 구현 실험에 의거한 지연 수행 평가를 보여주고, 웹2.0 표준 웹서비스 시스템의 성능 평가를 하였다. 본 논문에서 제안하는 모델은 웹 2.0 의 웹서비스 시스템의 통신 오버헤드와 메시지를 처리하는 시간, 서버 오버헤드를 감소시키면서, 표준 웹 서비스 프로토콜을 완전하게 지원할 수 있다. In this paper, we are to overcome the latency problem of current Web 2.0 Web Services system. To overcome the standard mobile web services implementation, a SOAP message processing system (SMSP) was proposed in which the SOAP request and response messages are directly processed without using Servlet engine. Our system can completely support standard Web Services protocol, reducing communication overhead, message processing time, and server overload.

Users of Web and grid services often must temporarily delegate some or all of their rights to a software entity to perform actions on their behalf. The problem with the typical grid services approach (X. 509 proxy certificates) is that commercial Web services tooling fails to recognize these certificates or process them properly. The security assertion markup language (SAML) is a standardized XML-based framework for exchanging authentication, authorization and attribute information. SAML has broadening commercial support but lacks delegation capabilities. To address this shortcoming, we exploit SAML's inherent extensibility to create a delegation framework for Web and grid services that supports both direct and indirect delegation. We develop a set of verification rules for delegation tokens that rely on WS-Security X.509 signatures, but do not force any trust relationship between the delegatee and the target service. We have implemented the framework on two common Web service hosting environments: Java/Tomcat and .NET. By leveraging existing Web services standards, we make it easier for Grid practitioners to build and consume Web and grid services without resorting to grid-specific protocols.

Virtual communities increasingly make use of standard Internet-enabled Web services to support their collaborative activities. Such Web services need to offer the right amount of functionality to meet community requirements. However, both requirements and enabling services are continuously in flux. A critical challenge therefore is that the community can efficiently ensure that Web service changes are both technically feasible and socially acceptable. In this paper, we outline a selection approach for virtual communities that takes into account both the feasibility and the acceptability of Web services. To this purpose, we adopt a semiotic view on the selection process, showing that for the adequate selection of Web services three subprocesses are required: (1) syntactic discovery, (2) semantic matching, and (3) pragmatic interpretation. We then present a meta-model of Web service selection support that is grounded in this view. This model can be used to detect gaps in Web service selection support. This knowledge is essential for the construction of better selection support methodologies. We apply the meta-model to analyze a case on a courseware development community.

Many data-driven software engineering tasks such as discovering programming patterns, mining API specifications, etc., perform source code analysis over control flow graphs (CFGs) at scale. Analyzing millions of CFGs can be expensive and performance of the analysis heavily depends on the underlying CFG traversal strategy. State-of-the-art analysis frameworks use a fixed traversal strategy. We argue that a single traversal strategy does not fit all kinds of analyses and CFGs and propose bespoke control flow analysis (BCFA). Given a control flow analysis (CFA) and a large number of CFGs, BCFA selects the most efficient traversal strategy for each CFG. BCFA extracts a set of properties of the CFA by analyzing the code of the CFA and combines it with properties of the CFG, such as branching factor and cyclicity, for selecting the optimal traversal strategy. We have implemented BCFA in Boa, and evaluated BCFA using a set of representative static analyses that mainly involve traversing CFGs and two large datasets containing 287 thousand and 162 million CFGs. Our results show that BCFA can speedup the large scale analyses by 1%-28%. Further, BCFA has low overheads; less than 0.2%, and low misprediction rate; less than 0.01%.

Data mining and scoring tool providers require users to use provider-specific ways to invoke their services. The provider-specific approach could be a major factor affecting why data mining tools and applications are not currently as widespread as one might hope. However, SOA can implements the loose coupling between the services provider and services consumer. Using Web service protocol (such as SOAP, WSDL and UDDI), the data mining task can be encapsulated into a standard Web services. Services consumer can dynamically bound different services provider based on Web services, which implements the integration of data mining applications with data mining and scoring tool. The Java Data Mining API (JDM) is the first attempt to create a standard Java API to access data-mining tools from Java applications. A new service discovery model where quality of service is taken as constraints when searching for Web services would give some confidence to the Web service consumers about the quality of the service they are about to invoke.

Business Process Execution Language for Web Services (abbreviated to BPEL) is a language for specifying business process behavior based on Web services. But it cannot ensure the correctness of desired specification and properties exhibited by the BPEL control flow. Based on an analysis of the grammar and control flow of BPEL language, we first propose a formal model for BPEL and give the semantics of the BPEL activities to generate the transition tuple. We then develop an algorithm to automatically transform part of the BPEL language into the input language of MCTK, a symbolic model checker developed by us, such that we can verify temporal and epistemic properties of the BPEL processes. Finally, we illustrate the effectiveness of the proposed algorithm through an example of Virtual Travel Agency Web Services Composition.

Web services provide users ever better methods to access and use Earth Observation data. Development of a web services architecture for the Global Earth Observing System of Systems was conducted using an evolutionary development process that depended on standards for geospatial web services. Standards for geospatial web services provide interfaces that can be scaled to global deployment. The GEOSS Architecture Implementation Pilot defined an evolutionary development process and reusable architecting methods for applying web services to a global scale system of systems for Earth observations. ISO/IEC, OGC and other standards are used by the AIP architecture to meet the objectives of GEOSS to enable comprehensive, coordinated and sustained observation of the Earth and also efficient publication and use of the collected information.

Standardized web services technology has been used in the construction industry to support activities such as sensing data integration, supply chain collaboration, and performance monitoring. Currently these web services are used for exchanging messages with simple structure and small size. However, building information models often contain rich information and are huge in size. Therefore, retrieving and exchanging building information models using standardized web services technology is challenging. This paper discusses the usage of ontologies and context awareness in standardized web services technology to facilitate efficient and lightweight information retrieval and exchange. Ontologies for building information such as Industry Foundation Classes (IFC) and aecXML have been developed for over a decade and become mature. These ontologies can be leveraged to structure the input and output messages of web services. On the other hand, context awareness not only provides data security according to user’s location, time, and profile, but also enables retrieval and exchange of partial information models. This paper presents and demonstrates an ontology-based context aware web service framework that is designed for retrieval and updating of building information models.

In 1998, Ian Foster and Carl Kesselman, together with thirty distinguished experts in high-performance computing and networking, laid the foundations of a new computing model called GRID. Their vision was introduced in the book, The GRID: Blueprint for a New Computing Infrastructure (see review, SCPE Vol. 3, No. 3 ). The editors wrote: … A computational grid is a hardware and software infrastructure that provides dependable, consistent, pervasive, and inexpensive access to high-end computational capabilities… allowing new classes of applications to emerge… as yet, we have only a preliminary understanding of what these new applications will look like. Over the next five years, Grid computing became the hottest R&D field. Academia and national labs built experimental infrastructures, new startups were established to develop Grid technologies, and the HPC giant vendors joined the party. Each one pushed in a different direction based on what and how he believed Grid computing should look. It was only a matter of time until people started to ask what the Grid is all about. A survey of ten Grid experts produced ten different answers. The question remains without a clear answer, leaving many people confused. Ian Foster picked up the gloves. In his article, What is the GRID? A three point checklist (GRIDtoday, July 22, 2002: Vol. 1, No. 6), he redefines the Grid model to reflect the trades and changes in the field during the past five years. According to Foster, a Grid is a system that: Coordinates resources that are not subject to centralized control. Uses standard, open, general-purpose protocols and interfaces. Delivers a nontrivial quality of service. But Foster's new definition could not encompass all of the Grid's approaches. Moreover, Foster explained by example what the Grid is not: A cluster management system such as Sun's Sun Grid Engine, Platform's Load Sharing Facility, or Viridian's Portable Batch System can, when installed on a parallel computer or local area network, deliver quality of service guarantees and thus constitutes a powerful Grid resource. However, such a system is not a Grid itself, due to its centralized control of the hosts that it manages Within a week the responses started to come in. The first one was from Wolfgang Gentzsch, Director of Grid computing at Sun Microsystems (GRIDtoday, August 5, 2002: Vol. 1, No. 8). Gentzsch wrote: I very much like Ian's two earlier definitions. Combined, they may provide a very generic Grid definition. The new checklist, however, reduces the potential of a wide and rich variety of Grids, with different architectures, operational models, and applications, and may miss the chance to becoming widely accepted as a standard definition of the Grid. Why do we need a definition for the Grid? Can the Grid be defined? Is a definition is necessary to the Grid's development? The Grid is an open vision and thus cannot be defined. An attempt to define the Grid can only reach the foreseen technology horizon, and this horizon is only one to two years ahead. Grid computing is a paradigm in shift. New architectures and standards are changing the shape and direction of the Grid's development. In the past year one such prominent architecture was Open Grid Services Architecture (OGSA). The OGSA is the first attempt to bridge the gap between two cyberspace worlds: the Internet and the Grid. The Internet and the Grid are two different computing models. There are people who believe that the Grid is the next generation of the Internet and the World Wide Web, saying that the Great Global Grid is still many years away. Others state that the Grid will complement, not replace, the Internet as we know it. In 1998, when the Grid blueprint was published, a new Internet language appeared called eXtensible Markup Language (XML). XML is a development tool for a new Internet computing model known as Web Services. At that time, nobody understood that there is a relationship between Web Services and the Grid. Three years past before Steve Tuecke from Argonne National Laboratory started to write a spec for Grid Services. Later, people from IBM joined the mission and together they created OGSA. The OGSA specification outlines interfaces to grid computing software that comply with Web Services standards. If adopted, Grid services such as job scheduling, authentication, failure-detection, staging of applications and data, and migration of applications and data, will all be accessed through standard Web Services architecture. OGSA is basically where Grid meets Web Services and maybe the first step towards full integration of the Internet and the Grid. The Internet appeared a decade ago. In the beginning, the Net offered primitive applications: a mailing system, ftp services, and a web of home pages. Nobody asked, What is the Internet? The years passed and new emerging Internet technologies were developed. Today we can talk on the phone over the Net, chat with friends, and video conference with colleagues on the other side of the world. New computing and business models were developed: e-commerce, e-learning, e-science, and e-you-name-it. And nobody asks what the Internet is. The Grid is a super-model, a bag of networking models associated with many types of architectures, software packages, applications, and standards. Today, when people talk about the Grid they mention Data Grids, Science Grids, and Campus Grids. And at the same time they mention Farm computing, Peer-to-peer computing, and Utility computing, among others. Ten years from now many of today's technologies will disappear and new ones will be developed. I don't know how Grid computing will look a decade from now, but I know that we will have g-commerce, g-learning, g-science, and g-chat. Nobody will ask what the Grid is. It will be obvious, just as the Internet is today. Ami Marowka The Computer Aided Design Laboratory School of Engineering and Computer Science Hebrew University of Jerusalem

Web service architectures have gained popularity in recent years within the scientific grid research community. One reason for this is that web services allow software and services from various organizations to be combined easily to provide integrated and distributed applications. However, most applications developed and used by scientific communities are not web-service-oriented, and there is a growing need to integrate them into grid applications based on service-oriented architectures. In this paper, we describe a framework that allows scientists to provide a web service interface to their existing applications as web services without having to write extra code or modify their applications in any way. In addition, application providers do not need to be experts in web services standards, such as Web Services Description Language, Web Services Addressing, Web Services Security, or secure authorization, because the framework automatically generates these details. The framework also enables users to discover these application services, interact with them, and compose scientific workflows from the convenience of a grid portal.

Interface grammars are a formalism for expressing constraints on sequences of messages exchanged between two components. In this paper, we extend interface grammars with an automated translation of XML Schema definitions present in WSDL documents into interface grammar rules. Given an interface grammar, we can then automatically generate either 1 a parser, to check that a sequence of messages generated by a web service client is correct with respect to the interface specification, or 2) a sentence generator producing compliant message sequences, to check that the web service responds to them according to the interface specification. By doing so, we can validate and generate both messages and sequences of messages in a uniform manner; moreover, we can express constraints where message structure and control flow cannot be handled separately.

A web service is a software interface that describes a collection of operations that can be accessed over the network through standardized XML messaging. Web services in different domains are diverse in implementation techniques thus requiring us to meet a wide range of test requirements. Testing services and service centric system poses new challenges to testing approaches. Several web services testing were developed to address these new challenges. Without testing, the web service is likely to suffer from various issues in terms of speed, scalability and stability. In this study, a generalized ontology model is used to measure the non-functional testable parameters and find the dependencies between them. The web services are got from the service providers and various testing is being executed over these services. Web service testing is performed to ensure that their functionality is in accordance with the Service Level Agreement (SLA). Metrics for each dependency will be formulated and invoked during every test and thus the test results which contain all the results about each service will be generated using Web Application Performance Tool (WAPT).

Smart contracts on blockchain platforms are susceptible to security issues that can lead to significant financial losses. This study converts the Solidity code into abstract syntax trees and generates control flow graphs and data flow graphs. These graphs train a graph convolutional network model to detect security weaknesses. The proposed system outperforms traditional tools, achieving higher accuracy, recall, precision, and F1 scores when detecting weaknesses such as integer overflow/underflow, reentrancy, delegate call to the untrusted callee, and time-based issues. This study demonstrates that leveraging control and data flow analysis with graph neural networks significantly enhances smart contract security and provides a robust and reliable solution.

Significant effort is currently invested in application integration, enabling business processes of different companies to interact and form complex multiparty processes. Web service standards, based on WSDL (Web Service Definition Language), have been adopted as process-to-process communication paradigms. However, the conceptual modeling of applications using Web services has not yet been addressed. Interaction with Web services is often specified at the level of the source code; thus, Web service interfaces are buried within a programmatic specification.In this article, we argue that Web services should be considered first-class citizens in the specification of Web applications. Thus, service-enabled Web applications should benefit from the high-level modeling and automatic code generation techniques that have long been advocated for Web application design and implementation. To this end, we extend a declarative model for specifying data-intensive Web applications in two directions: (i) high-level modeling of Web services and their interactions with the Web applications which use them, and (ii) modeling and specification of Web applications implementing new, complex Web services.Our approach is fully implemented within a CASE tool allowing the high-level modeling and automatic deployment of service-enabled Web applications.

Web services are the new paradigm for distributed computing. They offer interoperability of application and integration of large scale distributed systems. Amongst the web service standards, service registry is crucial to the overall utility of web service technology. However, the web services discovery mechanism pertaining with the UDDI [1] registry is inefficient because it only supports keyword-based and category-based matching, leading to irrelevant matches. Therefore, the provision of the scalable, flexible and robust web services publication and discovery system is crucial for the overall utility of web services. In this paper, we develop a scalable, robust and efficient infrastructure for web services publication and discovery amongst domain-based registries. More importantly, a novel algorithm is provided to classify web services into domain-based registries based on their semantic description. Experimental results show that our approach outperforms a centralized approach in terms of service discovery time.