Catálogo de publicaciones - libros

This paper addresses the problem of developing enterprise-class eBusiness solutions in a more economically viable and time-effective way, by adopting Model Driven Development (MDD). Specifically, we report on an experience of more than six years of collaboration between Acer Inc. (the 4th branded PC vendor worldwide) and Web Models, an Italian startup company spinoff of Politecnico di Milano, innovator in the market of software tools and methodologies for MDD. The results clearly demonstrate that MDD can shorten the development of complex eBusiness solutions, improve the quality and conformance to requirements, and increase the economic profitability of solutions, by lowering the total cost of ownership and extending the life span of systems.

In this paper, we discuss the major issues associated with the new model of software delivery – service on demand – and explain why it alters the economics of software. As this model is expected to deliver fundamental leaps in cost efficiency, operation performance, infrastructure orchestration and application control, we describe the supporting technology required to achieve these goals. We also highlight those crucial operational processes for enhancing the quality of software delivery under the service on demand model. We then briefly outline our research roadmap to develop an on demand operating environment based on the fundamental principles: standardization, repetition, and, ultimately, automation.

SOA proposed security mechanisms are only centered in the data transmitted between service provider and consumer. However, it’s well known that the biggest threats to the integrity of the information are precisely focused not on the data directly but on the code that manages it. Our main statement is that it will only be possible to reach an acceptable level of security if the protection mechanisms cover not only the data but also the code that process these data. In this paper we present a new approach about mobile code security based on the Services Oriented Architecture Reference Model and Web Services technology. This new model allows the development of systems with end-to-end security, where all elements (code and data) are secure.

To support the quality of service guarantee from the service provider side, complex web services require to be contracted through service level agreement. State of the art on web services and web service compositions provides for a number of models for describing quality of service for web services and their compositions, languages for specifying service level agreement in the web service context, and techniques for service level agreement negotiation and monitoring. However, there is no framework for service level agreement composition and composition monitoring, the existing design methodologies for web services do not address the issue of secure workflows development. The present research proposal aims to develop concepts and mechanisms for service level agreement composition and composition monitoring. A methodology that allows a business process designer to derive the skeleton of the concrete secure business processes from the early requirements analysis would benefit.

Web service technology can be used for integrating heterogeneous and autonomous applications into cross-organizational systems. A key problem is to support a high quality of service-oriented systems despite vulnerabilities caused by the use of external web services. One important aspect that has received little attention so far is risk management for such systems. This paper discusses risks peculiar for service-based systems, their impact and ways of mitigation. In the context of service-oriented design, risks can be reduced by selection of appropriate business partners, web service discovery, service composition and Quality of Service (QoS) management.

Vincenzo D’Andrea.

In the past ten years many web application development methods with their own or from other methods borrowed models, techniques and activities were proposed in literature. Each of these methods is appropriate for building several types of web applications on different modeling levels and project phases. It’s unlikely that a single method will ever be capable to cover all aspects of web application development. The most appropriate approach for web application projects is a construction of an organization-specific base method with the use of reusable method fragments (components) and the adaptation of the base method in order to support specific project characteristics. For this purpose, the basis for an appropriate method engineering framework is proposed, which includes a process for method construction and a repository for methods, method components, configurations, rules and development situations characteristics storage.