Describing and Verifying Web Service Using CCS

Model checking is a popular formal technique facilitating automatic verification of finite-state transition systems, and it has been applied to almost all of the Web service verification aspects, such as control-flow, data-flow, interaction, time requirements, quality of service, security requirements, etc. However, no systematic literature review focused on model checking of Web services is available. Motivated by this fact, in this paper, we systematically review existing research works on model checking based Web service verification appeared during the period of 2002-2017. We present a verification goal based classification of the collected articles, and for each paper, we identify the verification technique, target Web service standard, flavor of the employed model checking technique and tool, and other supplementary techniques, if any. Further, we highlight some of the issues, gaps, key challenges in this area and propose some future directions.

As the capability of an individual Web service is limited, it's necessary to create new functionalities with existing Web services. Web services composition is the ability to create a new value-added service by incorporating some existing Web services together. An important challenge for Web services composition is how to ensure the correctness and reliability of the WS-BPEL (Web services business process execution language) process and the composition. A graphical and formal modeling tool suitable for solving this problem is CPN (Colored Petri net), which provides formal semantics and a number of analysis techniques for modeling and verifying web services composition. This paper proposes a CPN-based model for web services composition, describes how to translate WS-BPEL to CPN model, and discusses the analysis and verification of services composition. The model enables efficient composition of Web services and validates the correctness of composition by formal verification.

The article describes a method for developing and modelling composite web-services. Web-service composition is used to derive new functionality from the interaction of existing web-services. Composite web-services are built in several stages: specifications (determining the type of service); development of the structure of the service based on the algebra of services; service composition modelling; selecting a service variant and generating a service. The main elements of the proposed approach are the algebra of services and web-services interaction models (basic and composite). The above approach formally presents the consideration of the main aspects in solving problems related to the construction of effective composite web-services and the selection of mathematical models, namely: description of web-services, determining the structure of web-services, taking into account the dynamics of information changes, taking into account the main uncertainties in building the structure web-services. Based on the approach, a method for constructing composite web-services has been developed. The method is based on an algebraic description of a web-service based on a specialized algebra of services. The method consists of the following steps: description of the task of developing a web-service; development of the structure of a web service based on the algebra of services; formal description of the structure and clarification of service operations; building models of functioning and interaction of service components; building simulation models of the composite service; defining the final structure of the composite service; web-service implementation. The main tool for describing composite services is the algebra of services, and the model building tool is colouredPetri nets implemented using СPN Tools. As an example of the application of the developed method, the construction of a pharmaceutical service is described, in which the modellingof the interaction of web-services based on Petri nets is used. The process of building a composite model of a web-service is considered. The process begins with building a pharmaceutical web-service model structure based on the service algebra. Based on the service algebra, operators were developed to implement composite services. The structure of the model is developed, which is presented in the form of a formal description. The process of building pharmaceutical service models in the СPN Tools environment is described in detail.

Lots of software companies rely on web technologies to test market hypotheses in order to develop viable businesses. They often need to quickly build web services that are at the core of their Minimum Viable Products (MVPs). MVPs must be reliable whereas they are based on specifications and hypotheses that are likely to change. Web services need to be well documented, to make it easy to develop applications that consume them. Model Driven Engineering approaches have been proposed and used to develop and evolve web services on one hand, and document them on the other hand. However, these approaches lack the ability to be suitable for both (i) rapid prototyping, (ii) model verification, (iii) compatibility with common programming languages and (iv) alignment between documentation and implementation. Here we propose a meta-model to express web services, the related tool to verify models consistency and an integration of this approach into the OpenAPI Specification. We adopt a shallow verification process to allow rapid prototyping by developers who are not formal methods experts, while still offering design-time guarantees that improve product quality and development efficiency. Web services are defined using parametric components which enable to express and formally verify web service patterns and to safely reuse them in other contexts. We built a tool to check consistency of extended OpenAPI 3.0 models and associated components implementations in order to generate corresponding web services. This allows us to give flexibility and verification support to developers, even in the context of an incremental development, as illustrated by a case study.

Traditional formal method has been solved the problems of functional modeling and verification of Web service composition, but it could not effectively analyze and calculate the costs of the service composition. A minimum cost composition algorithm based on process algebra CSP is proposed. The algorithm first translates the XML format Web service composition description to CSP format formal description. According to the trace model of the CSP, the executive paths for the proper composition schemes can be found. Finally, the total cost of the composition schemes can be solved out according to the cost of the single event in the web services' interfaces. A case study is presented that shows the algorithm can effectively calculate the total costs of the composition schemes, and the optimal scheme can be pick out refer to the results.

A web service is a software system that supports interoperable machine to machine interaction over the network. It can be any kind of service provided on the web that can exchange data between applications. In simple terms, it is any program that is callable by another program across the web using standard protocols. Web services are special because they are independent of the platform, programming language, and model design. In current web applications, more businesses are gradually publishing their business as services over the web. This growing number of web services available within an organization and on the Web raises a new and challenging search problem: locating desired web services. Searching for web services with conventional web search engines is insufficient in this context. In this paper, a latent semantic web service discovery and composition framework, addressing both discovery and composition of web services, is introduced. The framework provides a graphical visualization interface that can facilitate users in finding the desired web service beyond the general keyword search and provide composition of complex services if the service does not exist. A novel approach based on an information retrieval technique known as latent semantic analysis is applied to a large web service descriptions data set collection. By using co-occurrence patterns across the entire data collection, and then using those patterns to infer semantic relationships between documents, relevant results in a ranked order can be retrieved. Moreover, a back to front algorithm is applied to the composition search interface in order to compose complex web services in full or partial terms from pre-existing web services when the requested service does not exist. An experimental study conducted on a collection of 2525 publicity available web service shows improved performance to the technique applied in obtaining much better search results.

The automatic composition of Web services requires the existing services to be encoded in a semantic form, such as ontology. If Web services are represented with ontology, we can automatic compose Web services by means of their semantics. Ontology modeling is divided into two steps: input/output parameters modeling and Web services modeling. First, we collect Web services' input/output parameters, represent them with classes in ontology, and transform Web services to properties in ontology, define relations between classes and properties. Then we judge Web services' relations based on relations between properties transformed from these Web services and estimate whether these Web services can be composed.

THE Internet, along with its related technologies, has created an interconnected world in which information flows easily and tasks are processed collaboratively. To make service-oriented applications more robust, Web services must be examined from a transactional perspective. By transactional, we mean first defining the actions that guide the execution of Web services when failures arise and then the states that permit claiming the success of this execution following the handling of these failures. A variety of transactional models are reported in the database community. Some of these models can be leveraged and enhanced in response to Web services characteristics while others are not suitable for Web services due to the dynamic nature of Web services, the long-running execution scenarios that Web services take part in, and the successful execution of Web services despite other peers’ failure. Today’s service-oriented applications require advanced transactional models that guarantee integrity and continuity of business processes despite the dynamic nature of the features of the environments hosting the execution of these applications. This special section sheds light on the latest advances in the fields of Web services and transactional models in order to better address advanced research on and experience with transactional Web services. Four papers out of 19 submissions were selected for inclusion in this special section. Each submission was subject to a double-review process by at least three peer reviewers. In the first paper, entitled “Event-Based Design and Runtime Verification of Composite Service Transactional Behavior,” Gaaloul et al. propose an event-driven approach to validate the transactional behavior of Web services taking part in compositions. A composition life cycle consists of four phases, namely, design, execution, monitoring, and reengineering. The verification of this behavior throughout this life cycle is done either at design time to validate recovery mechanisms’ consistency or after runtime to detect execution deviations and repair design errors, and, therefore, formally ensure the execution reliability of Web services. In addition, this verification is based on the Event Calculus formalism, which offers a sound definition for this reliability. In the second paper, entitled “FACTS: A Framework for Fault-Tolerant Composition of Transactional Web Services,” Liu et al. note that delivering reliable compositions over unreliable Web services is challenging. To address this challenge, Liu et al. identify a set of high-level exception handling strategies and a new taxonomy of transactional Web services to devise a fault-tolerant mechanism that combines exception handling and transaction techniques. In addition, Liu et al. devise two modules, known as specification and verification, to assist service designers in constructing fault handling logic conveniently and correctly. This logic is automatically injected into WS-BPEL. In the third paper, entitled “Rule-Based Coordination of Distributed Web Service Transactions,” von Riegen et al. study the distributed transactional activity control problem in the context of service choreographies. In such a context, many participants are allowed to work together to achieve a global, common goal, and the initiator of a process is not always the one who is able to commit or cancel a transaction. Von Riegen et al. introduce a framework that allows autonomous coordination of dynamic processes. This framework extends WSBusinessActivity to strengthen the role of the coordinator. Predicate rules are developed to let participants cancel or complete a process and help the coordinators decide on the completion processes and the confirmation or cancellation of the participants’ works. In the fourth paper, entitled “TQoS: Transactional and QoS-Aware Selection Algorithm for Automatic Web Service Composition,” El Haddad et al. focus on the issues of selecting and composing Web services. A design-time selection algorithm is proposed in which transactional and QoS requirements are both integrated into the selection process. This algorithm is based on the notion of risk that indicates if execution outcomes can either be compensated for or not. Two risk levels of execution in a transactional system are considered: Risk 0, meaning that if the execution is successful, the obtained outcomes can be compensated for by the user, and Risk 1, meaning that the system does not guarantee successful execution, but if it achieves it, the outcomes cannot be compensated for by the user. We hope this special section inspires researchers to develop new transactional models that would guarantee service-oriented applications integrity and continuity. 30 IEEE TRANSACTIONS ON SERVICES COMPUTING, VOL. 3, NO. 1, JANUARY-MARCH 2010

In the Web Service world, it is an important technique that taking the usable behaviors in the existed web services provides some value-added functions by the service composition. Therefore, the usability analysis of web service behaviors is a significant problem to be solved. Based on our early study about behavior derivation for software components by interface automata (IA), a method is given for checking whether there are usable behaviors in a web service or not according to a user's requirement. A behavior is usable if it can be preserved in a composite web service under some constraints, otherwise it is unusable. Web services are described by BPEL4WS and the user's requirements are specified by MSCs. The key step in our proposal is to build an IA model for the web service behaviors. Thus, we give the transformation rules from BPEL4WS to IA. By using the algorithm of constructing an environment for an IA which had been given in our early works, the usability of a web service behaviors is checked. A case study from real application is used to validate our proposal.

Aiming at the hot and difficult issues in Web services and service composition, this paper analyzes and studies the selection of Web services and service composition from the functional and non functional attributes of Web services, and mainly makes the following work and innovation. First of all, the functional attributes of Web services are studied, Web services on various service provision platforms are collected, and Web services are classified. Secondly, aiming at the shortcomings of existing Web service QoS attribute evaluation models, an improved method is proposed, which introduces a comprehensive evaluation mechanism of variable weight vector. Based on the constant weight comprehensive evaluation method, the state variable weight vector is established to dynamically adjust the attribute weights of various service QoS indicators, so as to improve the accuracy and objectivity of the Web service QoS attribute evaluation. Finally, in view of the defects and deficiencies of traditional algorithms in the selection of Web service composition, the particle swarm optimization algorithm with linearly decreasing inertia weight and learning factor is introduced, which better balances the self cognition and social learning ability of particles, and improves the search speed and global search ability of particles. And a large number of experiments are carried out to compare it with the traditional algorithm, which verifies the effectiveness and superiority of the improved particle swarm optimization algorithm.

The Business Process Execution Language (BPEL) has become the standard in Web service composition, so that been adopted by industries to create mission critical services. The business process reliability especially business process consistency when some services failed is critical to composite services especially involving various organizations. However, it is difficult to conduct business process reliability testing for composite services due to complex business process in service composition, remote deployed services and long time testing duration. Little research is done to test fault tolerance capabilities of composite services only from low level. This paper proposes a technique on how to test the reliability of composite service defined in BPEL from the view of business semantics with little cost using fault injection. We present an approach for reliability testing of web services by using service stubs with semantic faults instead of real services which can be placed at service provider side or service consumer side. Dislike existing studies, we focus on how to find the reliability problems associating with business process - called semantics as the problems are not pure coding error but faults related to business process. In addition, the behavior of composite services in BPEL is analyzed when there are faults in orchestrated services invoked. Finally, a case study is given to show the whole process of reliability testing for composite web service.

Web services – a new breed of self-contained, self-describing, modular applications published, located, and invoked across the Web – handle functions, from simple requests to complicated business processes. They are defined as network-based application components with a services-oriented architecture (SOA) using standard interface description languages and uniform communication protocols. SOA enables organizations to grasp and respond to changing trends and to adapt their business processes rapidly without major changes to the IT infrastructure. The Inaugural International Conference on Next-Generation Web Services Practices (NWeSP'05) attracted researchers who are also the world's most respected authorities on the semantic Web, Web-based services, and Web applications and services. NWeSP'05 was held in cooperation with the IEEE Computer Society Task Force on Electronic Commerce, the Technical Committee on Internet, and the Technical Committee on Scalable Computing. This special issue presents eight papers focused on different aspects of Web services and their applications. Papers were selected based on fundamental ideas and concepts rather than the thoroughness of techniques employed. Papers are organized as follows: <I>Taher et al.</I> present the first paper, on a Quality of Service Information and Computational framework (QoS-IC) supporting QoS-based service selection for SOA. The framework's functionality is expanded using a QoS constraints model that establishes an association relationship between different QoS properties and is used to govern QoS-based service selection in the underlying algorithm. Using a prototype implementation, the authors demonstrate how QoS constraints improve QoS-based service selection and save consumers valuable time. Due to the complex infrastructure of web applications, response times perceived by clients may be significantly longer than desired. To overcome some of the current problems, <I>Vilas et al.</I>, in the second paper, propose a cache-based extension of the architecture that enhances the current web services architecture, which is mainly based on program-logic or protocol-dependent optimization. In the third paper, Jo and Yoo present authorization for securing XML sources on the Web. One of the disadvantages of existing access control is that the DOM tree must be loaded into memory while all XML documents are parsed to generate the DOM tree, such that a lot of memory is used in repetitive search for tree to authorize access to all nodes in the DOM tree. The complex authorization evaluation process required thus lowers system performance. Existing access control fails to consider information structure and semantics sufficiently due to basic HTML limitations. The authors overcome some of these limitations in the proposed model. In the fourth paper, Jung and Cho propose a novel behavior-network-based method for Web service composition. The behavior network selects services automatically through internal and external links with environmental information from sensors and goals. An optimal service is selected at each step, resulting in a globally optimal service sequence for achieving preset goals. The authors detail experimental results for the proposed model by comparing them with rule-based system and user tests. <I>Kong et al.</I> present an efficient method in the fifth paper for merging heterogeneous ontologies – no ontology building standard currently exists – and the many ontology-building tools available are based on different ontology languages, mostly focusing on how to create, edit and infer the ontology efficiently. Even ontologies about the same domain differ because ontology experts hold different view points. For these reasons, interoperability between ontologies is very low. The authors propose merging heterogeneous domain ontologies by overcoming some of the above limitations. In the sixth paper, Chen and Che provide polynomial-time tree pattern query minimization algorithm whose efficiency stems from two key observations: (i) Inherent redundant "components" usually exist inside the rudimentary query provided by the user, and (ii) nonedundant nodes may become redundant when constraints such as co-occurrence and required child/descendant are given. They show that the algorithm obtained by first augmenting the input tree pattern using constraints, then applying minimization, invariably finds a unique minimal equivalent to the original query. Chen and Che present a polynomial-time algorithm for tree pattern query (TPQ) minimization without XML constraints in the seventh paper. The two-part algorithm is a dynamic programming strategy for finding all matching subtrees within a TPQ. The algorithm consists of one for subtree recognization and a second for subtree deletion. In the last paper, <I>Bagchi et al.</I> present the mobile distributed virtual memory (MDVM) concept and architecture for cellular networks containing server-groups (SG). They detail a two-round randomized distributed algorithm to elect a unique leader and co-leader of the SG that is free of any assumption about network topology, and buffer space limitations and is based on dynamically elected coordinators eliminating single points of failure. As guest editors, we thank all authors featured in this special issue for their contributions and the referees for critically evaluating the papers within the short time allotted. We sincerely believe that readers will share our enjoyment of this special issue and find the information it presents both timely and useful.

In this chapter, we describe a model-based approach to the analysis of service interactions for web service choreography and their coordinated compositions. The move towards implementing web service choreography requires both design time verification and execution time validation of these service interactions to ensure that service implementations fulfil requirements of multiple interested partners before such compositions and choreographies are deployed for use. The approach employs several formal analysis techniques and perspectives, and applies these to the domain of web service choreographies and the compositional implementations that each role in these choreographies must satisfy. Our approach models the service interaction designs of choreographies (in the form of Message Sequence Charts), the service choreography descriptions (in WS-CDL – the Web Service Choreography Description Language) and the service composition processes (in BPEL4WS – the Business Process Language for Web Services). We translate models between UML and Web service specifications using the Finite State Process algebra notation. Where interactions deviate from choreography rules, the interaction sequences can be shown back to the user of the approach in an easy and accessible way, in the UML form. The described approach is supported by a suite of cooperating tools, formal modelling, simulation, animation and providing verification results from choreographed web service interactions. The tool suite and related papers are available for download at http://www.doc.ic.ac.uk/ltsa/eclipse/wsengineer.

Motivated by the problem of simplifying the manual operation of the composition process, we propose an approach to automatically compose available Web services to fulfill user’s goal based on the assumption that there are a set of alternative Web services with similar functionality and different QoS properties. A formal model (i.e. semantic links matrix, SLM for short) is proposed to store semantic links values for the Web services with semantic relationship and QoS of Web services. The SLM provides a search place for a backward-search planning algorithm, at the same time; the QoS criteria make a rational and effective decision among a number of similar Web services. The function and some properties of the algorithm are analyzed. The approach can improve the correctness and flexibility for Web services composition and satisfy the local QoS attribute.

Web services composition refers to the process of com-posing several web services to provide a new value-added service. It is an emerging paradigm for application integration within and across organizational boundaries. BPEL is presently the most prominent language to specify and execute business processes, using web services as its technological basis. However, BPEL is an XML-based language and may suffer from ambiguity and some erroneous properties. It is feasible to analyze BPEL with some formal methods like Petri nets, which is helpful to clarify the semantics of BPEL.In this paper we discuss some service composition patterns supported in BPEL based on SynchroNet, a special class of Petri nets.