CT-T: Modeling and Analyzing Trust in Service-Oriented Architectures

面向服务的体系结构（SOA）支持在异构计算机系统上实现的服务的动态集成。 SOA的一个优点是，它们通过抽象实现的低级细节来提供高级的、语义丰富的服务。 Google和Amazon的Web服务API等有用服务的可用性促进了集成大量服务以提供新颖、更复杂功能的应用程序的发展。随着面向服务的模型越来越多地被采用，需要严格的方法来对SOA中的信任进行建模，并以基于服务的应用程序的形式确保服务组合中的信任。 这些方法应该保证，通过组合服务，满足一定的信任properties之一，将获得一个应用程序，满足所需的信任properties.本项目的目标是开发新的工具和技术的建模和基于SOA的应用程序的信任属性的分析。 更确切地说，本研究的目标是开发一个框架，该框架利用信任的正式模型、自动化和交互式验证技术以及程序分析技术，在接口和实现级别上解决单个服务及其组合的信任属性。本研究的更广泛影响将是一个全面的框架，该框架提供了许多用于建模、分析、以及基于SOA的应用程序中信任属性的实施。这些工具和技术将为政府、军事和私人环境中基于SOA的应用程序的实现提供更值得信赖的基础设施。

Service-oriented architectures (SOAs) enable the dynamic integration of services implemented on heterogeneous computer systems. An advantage of SOAs is that they provide high-level, semantically-rich services by abstracting the low-level details of their implementation. The availability of useful services such as Google's and Amazon's web service APIs has fostered applications that integrate a number of services to provide novel, more complex functionality.As the service-oriented model is increasingly adopted, there is a need for rigorous approaches to model trust in SOAs and ensure trust in the composition of services, in the form of service-based applications. These approaches should guarantee that by composing services that satisfy certain trust properties one will obtain an application that satisfies the desired trust properties.The goal of this project is to develop novel tools and techniques for the modeling and analysis of trust properties of SOA-based applications. More precisely, the goal of this research is to develop a framework that leverages formal models of trust, automated, and interactive verification techniques, and program analysis techniques to address trust properties of single services and of their compositions, at both the interface and implementation levels.The broader impact of this research will be a comprehensive framework that provides a number of techniques and tools for the modeling, analysis, and enforcement of trust properties in SOA-based applications. These tools and techniques will provide a more trustworthy infrastructure for the implementation of SOA-based applications in governmental, military, and private environments.