A test-based security certification scheme for web services

摘要: The Service-Oriented Architecture (SOA) paradigm is giving rise to a new generation of applications built by dynamically composing loosely coupled autonomous services. Clients (i.e., software agents acting on behalf human users or service providers) implementing such complex typically search and integrate services the basis their functional requirements trust in suppliers. A major issue this scenario relates definition an assurance technique allowing clients select nonfunctional increasing confidence that selected will satisfy requirements. In article, we first present solution focuses security supports test-based certification scheme for Web driven properties be certified relies upon formal model. evidence supporting property computed using model-based testing approach that, starting from model, automatically generates test cases used certification. We also define set indexes metrics evaluate level quality process. Finally, our evaluation toolkit experimental results obtained applying financial Interactive Financial eXchange (IFX) standard.