语义Web服务安全研究

随着语义Web技术的出现和发展，在大规模、开放、异构的分布式环境中实现Web服务的自动发现、选择，组合、调用和监控成为可能。语义Web服务解决了Web服务的语义描述问题，但也面临着与Web服务一样的安全、隐私和信任等问题。本文分析了Web服务当前面临的主要安全威胁及现有业界安全标准存在的局限性，介绍了安全本体概念并给出了一个基于OWL表示的安全本体例子，最后阐述了语义Web服务应用安全框架中安全服务的语义描述问题，对OWL-S服务本体语言进行扩展，以实现语义安全本体和策略注释。     

A Dynamic Foundational Architecture for Semantic Web Services

The combination of Web services and ontologies is gaining momentum as the potential silver bullets for tomorrows Web, i.e., the Semantic Web. We propose an architectural foundation for managing semantic Web services in dynamic environments. We introduce the concept of community to cater for an ontological organization of Web services. We develop an ontology called community ontology that serves as a template for describing communities of Web services. We also propose a peer-to-peer approach for managing communities in dynamic environments.     

整合Agent与语义Web服务

目前的语义web服务方法和标准提供了很多由Agent平台操纵的基础设施，这有利于Agent与语义web服务的结合。本文分析了语义web服务与Agent之间的关系，提出Agent的主要角色是用来封装用户的意图，协调用户的目标，并最终调用web服务.我们利用当前的Agent技术与语义web服务技术，设计出自己的平台，整合了Agent BDI模型与语义Web服务。     

A unified framework for managing Web-based services

The emergence of Web technologies enables a variety of Web-based service applications, which can be examined from business process integration, supply chain management, and knowledge management perspectives. To categorize existing Web-based services while foreseeing potential new types, a unified view is needed to represent the structures and processes of Web-based services. This paper proposes a general framework to identify essential structures and operations of Web-based services, and then models these components. We articulate the framework with Web technologies, such as Web service and semantic Web, multi-agent and peer-to-peer, and Web information retrieval and mining. Two comprehensive examples in insurance and knowledge services are used to elaborate the use of Web-based service framework in fulfilling business processes. This study synthesizes essential structures and processes of Web-based services to build a framework for researchers and practitioners to develop Web-based services and techniques.     

Usage-based dynamic pricing of Web services for optimizing resource allocation

Web services technology is becoming an important technological trend in Web application development and integration. Based on open standards, such as SOAP, WSDL, and UDDI, Web services allow Web-based applications to communicate with each other through standardized XML messaging and to form loosely coupled distributed systems. Although the open feature of Web services benefits service providers in servicing consumers, the unlimited computing resources access of Web services to network bandwidth, storage throughput, and CPU time may lead to overexploitation of the resources when applications based on the Web services technology are widely accepted. Therefore, it is critical to optimize the operation of Web services, subject to the QoS requirements of service requests, to assure the total benefits of the service providers and the service consumers. This paper proposes a usage-based dynamic pricing approach to optimizing resource allocation of Web services in the principle of economics, and reports on a pilot implementation demonstrating the technical feasibility of the proposed approach.

Towards semantically enhanced Web service repositories

The success of the Web services technology has brought topics as software reuse and discovery once again on the agenda of software engineers. While there are several efforts towards automating Web service discovery and composition, many developers still search for services via online Web service repositories and then combine them manually. However, from our analysis of these online repositories, it yields that, unlike traditional software libraries, they rely on little metadata to support service discovery. We believe that the major cause is the difficulty of automatically deriving metadata that would describe rapidly changing Web service collections. In this paper, we discuss the major shortcomings of state of the art Web service repositories and as a solution, we report on ongoing work and ideas on how to use techniques developed in the context of the Semantic Web (ontology learning, matching, metadata based presentation) to improve the current situation.     

Aligning Semantic Web applications with network access controls

Access controls for Semantic Web applications are commonly considered at the level of the application-domain and do not necessarily consider the security controls of the underlying infrastructure to any great extent. Low-level network access controls such as firewalls and proxies are considered part of providing a generic network infrastructure that hosts a variety of Semantic Web applications and is independent of the application-level access control services. For example, it is unusual to include firewall policy rules in an application policy that constrain the kinds of application information different principals may access. As a consequence, an improperly configured infrastructure may unintentionally hinder the normal operation of a Semantic Web application. Simply opening a firewall for HTTP and HTTPS services does not necessarily result in a proper configuration. Taking an ontology-based approach, this paper considers how a firewall configuration should be analyzed with respect to the Semantic Web application(s) that it hosts.     

IRS-III: A broker-based approach to semantic Web services

A factor limiting the take up of Web services is that all tasks associated with the creation of an application, for example, finding, composing, and resolving mismatches between Web services have to be carried out by a software developer. Semantic Web services is a combination of semantic Web and Web service technologies that promise to alleviate these problems. In this paper we describe IRS-III, a framework for creating and executing semantic Web services, which takes a semantic broker-based approach to mediating between service requesters and service providers. We describe the overall approach and the components of IRS-III from an ontological and architectural viewpoint. We then illustrate our approach through an application in the eGovernment domain.     

METEOR-S WSDI: A Scalable P2P Infrastructure of Registries for Semantic Publication and Discovery of Web Services

Web services are the new paradigm for distributed computing. They have much to offer towards interoperability of applications and integration of large scale distributed systems. To make Web services accessible to users, service providers use Web service registries to publish them. Current infrastructure of registries requires replication of all Web service publications in all Universal Business Registries. Large growth in number of Web services as well as the growth in the number of registries would make this replication impractical. In addition, the current Web service discovery mechanism is inefficient, as it does not support discovery based on the capabilities of the services, leading to a lot of irrelevant matches. Semantic discovery or matching of services is a promising approach to address this challenge. In this paper, we present a scalable, high performance environment for Web service publication and discovery among multiple registries. This work uses an ontology-based approach to organize registries into domains, enabling domain based classification of all Web services. Each of these registries supports semantic publication and discovery of Web services. We believe that the semantic approach suggested in this paper will significantly improve Web service publication and discovery involving a large number of registries. This paper describes the implementation and architecture of the METEOR-S Web Service Discovery Infrastructure, which leverages peer-to-peer computing as a scalable solution.     

基于Web标准的信息港研究

数字城市是以Intemet为平台的,实现空间信息互操作为核心的城市信息管理系统,却受到跨行业应用的基础数据不同组织形式制约。数据的组织与表现松耦合关系是实现空间信息互操作的重要环节,也是适应语义网络计算标准的要求。Web标准将页面行为与表现分开,为信息港实现资源的一体化管理,满足用户按需的3A（Anybody,Anytime,Anywhere）视化服务,达到开放、共享根本目标提供了架构和实现的途径,同时隐含了制约信息港门户性能的关键问题和解决途径。     

Web服务测试技术综述

面向服务的体系结构（SOA）已成为基于Web的分布式系统的主要发展趋势。Web服务作为实现SOA的一种形式,已得到广泛的关注与应用。由于Web服务为基于开放和通用的协议与平台,其服务质量与可信等均可能存在问题,这将会阻碍Web服务的发展。Web服务进行充分测试可保证Web服务的质量,然而由于Web服务所具有的特点,传统的软件测试技术方法不再适用于Web服务的测试,所以对Web服务测试方法和技术的研究成为当务之急。本文在SOA体系结构基础上,讨论了Web服务测试的难点和Web服务测试的基本方法,分析了目前Web服务测试的研究现状。最后,展望了未来可能的研究方向。     

Web information fusion: A review of the state of the art

In this paper, we introduce and overview advances in the field of Web information fusion and integration. As it is such a broad and diverse topic that is researched in many different fields, we choose to provide a unified view by focusing on selected survey articles that extensively cover earlier research contributions. Given the important role that ontologies are playing in Web information fusion and the emergence and fast development of the Semantic Web and Web 3.0 technologies, a separate section is devoted to the topic of ontology research and the Semantic Web. Then, in the section on Web-based support systems, several applications that are enabled as the result of advances in Web information fusion are discussed.     

语义Web服务信誉度模型及其实现

语义Web服务信誉度通过对一个语义Web服务过去的“表现”进行综合,为其预期的行为作出评价。针对语义Web服务的特点,提出了一种语义Web服务信誉度模型,并深入研究了其相关算法。该模型为服务信誉度加入了语义信息,并综合了第三方权威机构的评价,使得信誉度值更有效和准确。在此基础上,提出了一种将该信誉度模型与现有语义Web服务体系结构结合的实现方案,并给出了相关算法的实现思路和信誉度对象的类结构。     

语义Web服务发现技术

传统的Web服务发现技术大多采用基于关键字的服务匹配机制,缺乏对Web服务功能的语义性描述,影响了Web服务的查全率、查准率和查找的智能化.研究基于语义的Web服务匹配方法,在经典Web服务匹配算法的基础上进行改进,研究单概念语义Web服务匹配算法,并由此得出多概念语义Web服务匹配的最优顺序,结合输入、输出参数,最终得出语义Web服务匹配结果,实验结果表明,改进后的方法比BGM算法匹配度高.     

基于信誉的语义Web服务发现

服务发现在语义Web领域是一个挑战性问题.一个关键问题是发现满足用户功能需求的最佳服务.同样重要的是,电子商务应用还要求发现满足QoS需求的最佳服务.由此提出一个基于信誉管理的分布式服务选择框架.它主要有以下特点：用一个结构化的覆盖网络作为分布式服务存储系统来提高系统的有效性和可扩展性; 提出一个QoS感知的语义Web服务发现方法,并给出基于用户反馈的分布式信誉度评估算法.最后用一个例子示范算法如何解决实际问题.     

基于P2P网络模型的Web搜索引擎用户隐私保护

网页搜索引擎(Web search engine, WSE)存储和分析用户的查询记录,从而建立用户资料来提供个性化的搜索服务。针对WSE中存在侵犯用户隐私的问题,提出一种基于P2P网络模型的WSE前端用户隐私保护方案。利用P2P网络架构来将用户根据他们的爱好进行分组,并构建多层隐私保护机制,通过节点转发来提交用户查询,WSE只能获得一组查询的简要特征并提供相应的服务。同时保护诚实用户不被WSE暴露,并将自私用户暴露给WSE。实验结果表明,该方案能够很好保护用户隐私,并提供良好的服务质量。