Combining behavioural types with security analysis

Today's software systems are highly distributed and interconnected, and they increasingly rely on communication to achieve their goals; due to their societal importance, security and trustworthiness are crucial aspects for the correctness of these systems. Behavioural types, which extend data types by describing also the structured behaviour of programs, are a widely studied approach to the enforcement of correctness properties in communicating systems. This paper offers a unified overview of proposals based on behavioural types which are aimed at the analysis of security properties

IHE cross-enterprise document sharing for imaging: interoperability testing software

<p>Abstract</p> <p>Background</p> <p>With the deployments of Electronic Health Records (EHR), interoperability testing in healthcare is becoming crucial. EHR enables access to prior diagnostic information in order to assist in health decisions. It is a virtual system that results from the cooperation of several heterogeneous distributed systems. Interoperability between peers is therefore essential. Achieving interoperability requires various types of testing. Implementations need to be tested using software that simulates communication partners, and that provides test data and test plans.</p> <p>Results</p> <p>In this paper we describe a software that is used to test systems that are involved in sharing medical images within the EHR. Our software is used as part of the Integrating the Healthcare Enterprise (IHE) testing process to test the Cross Enterprise Document Sharing for imaging (XDS-I) integration profile. We describe its architecture and functionalities; we also expose the challenges encountered and discuss the elected design solutions.</p> <p>Conclusions</p> <p>EHR is being deployed in several countries. The EHR infrastructure will be continuously evolving to embrace advances in the information technology domain. Our software is built on a web framework to allow for an easy evolution with web technology. The testing software is publicly available; it can be used by system implementers to test their implementations. It can also be used by site integrators to verify and test the interoperability of systems, or by developers to understand specifications ambiguities, or to resolve implementations difficulties.</p

Agents interoperability via conformance modulo mapping

We present an algorithm for establishing a flexible conformance relation between two local agent interaction protocols (LAIPs) based on mappings involving agents and messages, respectively. Conformance is in fact computed "modulo mapping": two LAIPs \u3c4 and \u3c4 may involve different agents and use different syntax for messages, but may still be found to be conformant provided that a given map from entities appearing in \u3c4 to corresponding entities in \u3c4 is applied. LAIPs are modelled as trace expressions whose high expressive power allows for the design of protocols that could not be specified using finite state automata or equivalent formalisms. This expressive power makes the problem of stating if \u3c4 conforms to \u3c4 undecidable. We cope with this problem by over-approximating trace expressions that may lead to infinite computations, obtaining a sound but not complete implementation of the proposed conformance check

Honesty by typing

We propose a type system for a calculus of contracting processes. Processes may stipulate contracts, and then either behave honestly, by keeping the promises made, or not. Type safety guarantees that a typeable process is honest - that is, the process abides by the contract it has stipulated in all possible contexts, even those containing dishonest adversaries

What BPM Technology Can Do for Healthcare Process Support

Healthcare organizations are facing the challenge of delivering personalized services to their patients in a cost-effective and efficient manner. This, in turn, requires advanced IT support for healthcare processes covering both organizational procedures and knowledge-intensive, dynamic treatment processes. Nowadays, required agility is often hindered by a lack of flexibility in hospital information systems. To overcome this inflexibility a new generation of information systems, denoted as process-aware information systems (PAISs), has emerged. In contrast to data- and function-centered information systems, a PAIS separates process logic from application code and thus provides an additional architectural layer. However, the introduction of process-aware hospital information systems must neither result in rigidity nor restrict staff members in their daily work. This keynote presentation reflects on recent developments from the business process management (BPM) domain, which enable process adaptation, process flexibility, and process evolution. These key features will be illustrated along existing BPM frameworks. Altogether, emerging BPM methods, concepts and technologies will contribute to further enhance IT support for healthcare processes

Towards a pivotal-based approach for business process alignment.

This article focuses on business process engineering, especially on alignment between business analysis and implementation. Through a business process management approach, different transformations interfere with process models in order to make them executable. To keep the consistency of process model from business model to IT model, we propose a pivotal metamodel-centric methodology. It aims at keeping or giving all requisite structural and semantic data needed to perform such transformations without loss of information. Through this we can ensure the alignment between business and IT. This article describes the concept of pivotal metamodel and proposes a methodology using such an approach. In addition, we present an example and the resulting benefits

Healthcare Process Support: Achievements, Challenges, Current Research

Healthcare organizations are facing the challenge of delivering high-quality services to their patients at affordable costs. To tackle this challenge, the Medical Informatics community targets at formalisms for developing decision-support systems (DSSs) based on clinical guidelines. At the same time, business process management (BPM) enables IT support for healthcare processes, e.g., based on workflow technology. By integrating aspects from these two fields, promising perspectives for achieving better healthcare process support arise. The perspectives and limitations of IT support for healthcare processes provided the focus of three Workshops on Process-oriented Information Systems (ProHealth). These were held in conjunction with the International Conference on Business Process Management in 2007-2009. The ProHealth workshops provided a forum wherein challenges, paradigms, and tools for optimized process support in healthcare were debated. Following the success of these workshops, this special issue on process support in healthcare provides extended papers by research groups who contributed multiple times to the ProHealth workshop series. These works address issues pertaining to healthcare process modeling, process-aware healthcare information system, workflow management in healthcare, IT support for guideline implementation and medical decision support, flexibility in healthcare processes, process interoperability in healthcare and healthcare standards, clinical semantics of healthcare processes, healthcare process patterns, best practices for designing healthcare processes, and healthcare process validation, verification, and evaluation

Web services choreography testing using semantic service description

Web services have become popular due to their ability to integrate with and to interoperate heterogeneous applications. Several web services can be combined into a single application to meet the needs of users. In the course of web services selection, a web candidate service needs to conform to the behaviour of its client, and one way of ensuring this conformity is by testing the interaction between the web service and its user. The existing web services test approaches mainly focus on syntax-based web services description, whilst the semantic-based solutions mostly address composite process flow testing. The aim of this research is to provide an automated testing approach to support service selection during automatic web services composition using Web Service Modeling Ontology (WSMO). The research work began with understanding and analysing the existing test generation approaches for web services. Second, the weaknesses of the existing approaches were identified and addressed by utilizing the choreography transition rules of WSMO in an effort to generate a Finite State Machine (FSM). The FSM was then used to generate the working test cases. Third, a technique to generate an FSM from Abstract State Machine (ASM) was adapted to be used with WSMO. This thesis finally proposed a new testing model called the Choreography to Finite State Machine (C2FSM) to support the service selection of an automatic web service composition. It proposed new algorithms to automatically generate the test cases from the semantic description (WSMO choreography description). The proposed approach was then evaluated using the Amazon E-Commerce Web Service WSMO description. The quality of the test cases generated using the proposed approach was measured by assessing their mutation adequacy score. A total of 115 mutants were created based on 7 mutant operators. A mutation adequacy score of 0.713 was obtained. The experimental validation demonstrated a significant result in the sense that C2FSM provided an efficient and feasible solution. The result of this research could assist the service consumer agents in verifying the behaviour of the Web service in selecting appropriate services for web service composition