BPEL4PEOPLE Anti-Patterns: Discovering Authorization Constraint Anti-Patterns in Web Services

  • Henrique J. A. Holanda
  • Carla K. de M. Marques
  • Francisca Aparecida P. Pinto
  • Yann-Gae¨l Guéhéneuc

Abstract


Despite the abundance of analysis techniques to discover antipatterns in BPEL, there is hardly any support for authorization constraint errors in web services orchestrated by BPEL4People. Most techniques simply abstract from people (human user interactions), while people dependencies can be the source of all kinds of errors. This paper focuses on the discovery authorization constraint anti-patterns in web services orchestrated by BPEL4People. We present an analysis approach that is expressed in terms of rule card, the wellknown, stable, adaptable, and effective model-checking techniques can be used to discover authorization constraint errors. Moreover, our approach enables a seamless integration of control-flow and authorization constraint verification.

Published
2018-07-26
HOLANDA, Henrique J. A.; MARQUES, Carla K. de M.; PINTO, Francisca Aparecida P.; GUÉHÉNEUC, Yann-Gae¨l. BPEL4PEOPLE Anti-Patterns: Discovering Authorization Constraint Anti-Patterns in Web Services. In: PROCEEDINGS OF WORKSHOP ON SOCIAL, HUMAN AND ECONOMIC ASPECTS OF SOFTWARE (WASHES), 3. , 2018, Natal. Anais [...]. Porto Alegre: Sociedade Brasileira de Computação, 2018 . ISSN 2763-874X. DOI: https://doi.org/10.5753/washes.2018.3474.