COWS: A Timed Service-Oriented Calculus

COWS (Calculus for Orchestration of Web Services) is a foundational language for Service Oriented Computing that combines in an original way a number of ingredients borrowed from well-known process calculi, e.g. asynchronous communication, polyadic synchronization, pattern matching, protection, delimited receiving and killing activities, while resulting different from any of them. In this paper, we extend COWS with timed orchestration constructs, this way we obtain a language capable of completely formalizing the semantics of WS-BPEL, the ‘de facto’ standard language for orchestration of web services. We present the semantics of the extended language and illustrate its peculiarities and expressiveness by means of several examples

Specifying and Analysing SOC Applications with COWS

COWS is a recently defined process calculus for specifying and combining service-oriented applications, while modelling their dynamic behaviour. Since its introduction, a number of methods and tools have been devised to analyse COWS specifications, like e.g. a type system to check confidentiality properties, a logic and a model checker to express and check functional properties of services. In this paper, by means of a case study in the area of automotive systems, we demonstrate that COWS, with some mild linguistic additions, can model all the phases of the life cycle of service-oriented applications, such as publication, discovery, negotiation, orchestration, deployment, reconfiguration and execution. We also provide a flavour of the properties that can be analysed by using the tools mentioned above

A WSDL-Based Type System for WS-BPEL

We tackle the problem of providing rigorous formal foundations to current software engineering technologies for web services. We focus on two of the most used XML-based languages for web services: WSDL and WS-BPEL. To this aim, first we select an expressive subset of WS-BPEL, with special concern for modeling the interactions among web service instances in a network context, and define its operational semantics. We call ws-calculus the resulting formalism. Then, we put forward a rigorous typing discipline that formalizes the relationship existing between ws-calculus terms and the associated WSDL documents and supports verification of their compliance. We prove that the type system and the operational semantics of ws-calculus are ‘sound’ and apply our approach to an example application involving three interacting web services

The Sensoria Approach Applied to the Finance Case Study

This chapter provides an effective implementation of (part of) the Sensoria approach, specifically modelling and formal analysis of service-oriented software based on mathematically founded techniques. The ‘Finance case study’ is used as a test bed for demonstrating the feasibility and effectiveness of the use of the process calculus COWS and some of its related analysis techniques and tools. In particular, we report the results of an application of a temporal logic and its model checker for expressing and checking functional properties of services and a type system for guaranteeing confidentiality properties of services

I FATTORI DETERMINANTI DEGLI INFORTUNI SUI CANTIERI EDILI DELL'ASL DI LAGONEGRO

QUESTO LAVORO VUOLE INDAGARE, ATTRAVERSO DEGLI STRUMENTI STATISTICI, QUALI LA CORRELAZIONE E LA REGRESSIONE, SULLE CAUSE CHE MAGGIORMENTE DETERMINANO GLI INFORTUNI NEL SETTORE DELL’EDILIZIA. LO STUDIO È STATO EFFETTUATO PRESSO IL DISTRETTO DI LAGONEGRO DELL’ASP DI POTENZA. È STATA EFFETTUATA UN’ANALISI SUL GRADO DI CORRELAZIONE DELL’EVENTO INFORTUNIO E LA SUA GRAVITÀ, CON ALCUNI FATTORI QUALI L’ETÀ, LA MANSIONE DEI LAVORATORI, LA LORO FORMAZIONE, L’USO DEI DISPOSITIVI DI SICUREZZA, LE INFRAZIONI REALIZZATE, L’ESSERE DIPENDENTI DI DITTE VIRTUOSE O MENO, ECC. LE IPOTESI INIZIALI HANNO TROVATO UNA VERIFICA ANCHE SORPRENDENTE, CHE CI ILLUSTRANO LA FONDAMENTALE IMPORTANZA DELLA LEGISLAZIONE SULLA SICUREZZA E DEI COMPITI DEL TECNICO DELLA PREVENZIONE. I RISULTATI SOSTENGONO CHE L’INFORTUNIO HA LA STESSA CORRELAZIONE TRA I LAVORATORI DI PICCOLI E GRANDI CANTIERI. I LAVORATORI CHE HANNO MAGGIORI PROBABILITÀ DI INFORTUNARSI SONO QUELLI CON MENO ANNI DI ESPERIENZA, IMPEGNATI SALTUARIAMENTE ED IN POCHI CANTIERI. AL CONTRARIO PER I LAVORATORI DI DITTE VIRTUOSE, FORMATI, CHE FANNO USO ASSIDUO DI D.P.I. E CHE NON USANO ALCOOL SUI CANTIERI, LA PROBABILITÀ DI INFORTUNARSI È MINORE. LO STUDIO CONFERMA CHE LA SICUREZZA NON È SEMPLICEMENTE IL RISPETTO DI UNA NORMATIVA, MA È SEMPRE DI PIÙ L’INSTAURASI DI UNA FONDAMENTALE CULTURA DELLA PREVENZIONE

On Secure Implementation of an IHE XUA-Based Protocol for Authenticating Healthcare Professionals

The importance of the Electronic Health Record (EHR) has been addressed in recent years by governments and institutions.Many large scale projects have been funded with the aim to allow healthcare professionals to consult patients data. Properties such as confidentiality, authentication and authorization are the key for the success for these projects. The Integrating the Healthcare Enterprise (IHE) initiative promotes the coordinated use of established standards for authenticated and secure EHR exchanges among clinics and hospitals. In particular, the IHE integration profile named XUA permits to attest user identities by relying on SAML assertions, i.e. XML documents containing authentication statements. In this paper, we provide a formal model for the secure issuance of such an assertion. We first specify the scenario using the process calculus COWS and then analyse it using the model checker CMC. Our analysis reveals a potential flaw in the XUA profile when using a SAML assertion in an unprotected network. We then suggest a solution for this flaw, and model check and implement this solution to show that it is secure and feasible

Dysregulated GPCR Signaling and Therapeutic Options in Uveal Melanoma.

Uveal melanoma is the most common primary intraocular malignant tumor in adults and arises from the transformation of melanocytes in the uveal tract. Even after treatment of the primary tumor, up to 50% of patients succumb to metastatic disease. The liver is the predominant organ of metastasis. There is an important need to provide effective treatment options for advanced stage uveal melanoma. To provide the preclinical basis for new treatments, it is important to understand the molecular underpinnings of the disease. Recent genomic studies have shown that mutations within components of G protein-coupled receptor (GPCR) signaling are early events associated with approximately 98% of uveal melanomas

A Logical Verification Methodology for Service-Oriented Computing

We introduce a logical verification methodology for checking behavioural properties of service-oriented computing systems. Service properties are described by means of SocL, a branching-time temporal logic that we have specifically designed to express in an effective way distinctive aspects of services, such as, e.g., acceptance of a request, provision of a response, and correlation among service requests and responses. Our approach allows service properties to be expressed in such a way that they can be independent of service domains and specifications. We show an instantiation of our general methodology that uses the formal language COWS to conveniently specify services and the expressly developed software tool CMC to assist the user in the task of verifying SocL formulae over service specifications. We demonstrate feasibility and effectiveness of our methodology by means of the specification and the analysis of a case study in the automotive domain

Regulating Data Exchange in Service Oriented Applications

We define a type system for COWS, a formalism for specifying and combining services, while modelling their dynamic behaviour. Our types permit to express policies constraining data exchanges in terms of sets of service partner names attachable to each single datum. Service programmers explicitly write only the annotations necessary to specify the wanted policies for communicable data, while a type inference system (statically) derives the minimal additional annotations that ensure consistency of services initial configuration. Then, the language dynamic semantics only performs very simple checks to authorize or block communication. We prove that the type system and the operational semantics are sound. As a consequence, we have the following data protection property: services always comply with the policies regulating the exchange of data among interacting services. We illustrate our approach through a simplified but realistic scenario for a service-based electronic marketplace

Timed Multiparty Session Types

We propose a typing theory, based on multiparty session types, for modular verification of real-time choreographic interactions. To model real-time implementations, we introduce a simple calculus with delays and a decidable static proof system. The proof system ensures type safety and time-error freedom, namely processes respect the prescribed timing and causalities between interactions. A decidable condition on timed global types guarantees time-progress for validated processes with delays, and gives a sound and complete characterisation of a new class of CTAs with general topologies that enjoys progress and liveness