A Genetic Algorithms-based Approach for Optimized Self-protection in a Pervasive Service Middleware

TY - GEN

T1 - A Genetic Algorithms-based Approach for Optimized Self-protection in a Pervasive Service Middleware

AU - Zhang, Weishan

AU - Ingstrup, Mads

AU - Hansen, Klaus Marius

AU - Schütte, Julian

N1 - Conference code: 7

PY - 2009

Y1 - 2009

N2 - With increasingly complex and heterogeneous systems in pervasive service computing, it becomes more and more important to provide self-protected services to end users. In order to achieve self-protection, the corresponding security should be provided in an optimized manner considering the constraints of heterogeneous devices and networks. In this paper, we present a Genetic Algorithms-based approach for obtaining optimized security configurations at run time, supported by a set of security OWL ontologies and an event-driven framework. This approach has been realized as a prototype for self-protection in the Hydra middleware, and is integrated with a framework for enforcing the computed solution at run time using security obligations. The experiments with the prototype on configuring security strategies for a pervasive service middleware show that this approach has acceptable performance, and could be used to automatically adapt security strategies in the middleware.

AB - With increasingly complex and heterogeneous systems in pervasive service computing, it becomes more and more important to provide self-protected services to end users. In order to achieve self-protection, the corresponding security should be provided in an optimized manner considering the constraints of heterogeneous devices and networks. In this paper, we present a Genetic Algorithms-based approach for obtaining optimized security configurations at run time, supported by a set of security OWL ontologies and an event-driven framework. This approach has been realized as a prototype for self-protection in the Hydra middleware, and is integrated with a framework for enforcing the computed solution at run time using security obligations. The experiments with the prototype on configuring security strategies for a pervasive service middleware show that this approach has acceptable performance, and could be used to automatically adapt security strategies in the middleware.

U2 - 10.1007/978-3-642-10383-4_29

DO - 10.1007/978-3-642-10383-4_29

M3 - Conference article

SN - 0302-9743

SP - 404

EP - 419

JO - Lecture Notes in Computer Science

JF - Lecture Notes in Computer Science

T2 - International Conference on Service-Oriented Computing, CSOC-ServiceWave

Y2 - 24 November 2009 through 27 November 2009

ER -