Random-data perturbation techniques and privacy-preserving data mining

Privacy is becoming an increasingly important issue in many data-mining applications. This has triggered the development of many privacy-preserving data-mining techniques. A large fraction of them use randomized data-distortion techniques to mask the data for preserving the privacy of sensitive data. This methodology attempts to hide the sensitive data by randomly modifying the data values often using additive noise. This paper questions the utility of the random-value distortion technique in privacy preservation. The paper first notes that random matrices have predictable structures in the spectral domain and then it develops a random matrix-based spectral-filtering technique to retrieve original data from the dataset distorted by adding random values. The proposed method works by comparing the spectrum generated from the observed data with that of random matrices. This paper presents the theoretical foundation and extensive experimental results to demonstrate that, in many cases, random-data distortion preserves very little data privacy. The analytical framework presented in this paper also points out several possible avenues for the development of new privacy-preserving data-mining techniques. Examples include algorithms that explicitly guard against privacy breaches through linear transformations, exploiting multiplicative and colored noise for preserving privacy in data mining applications.     

Web应用测试技术进展

Web应用的特殊性使得其测试具有挑战性,但目前针对其测试的研究同其设计开发的研究相比相对薄弱.从Web应用的体系结构、实现技术、组成成分、运行机制、运行环境、开发设计等方面分析了影响测试的因素.归纳了现有Web应用设计阶段、开发阶段、运行阶段、维护阶段所涉及的主要测试方面及使用的动态、静态测试技术.并从测试的几个关键方面,如链接测试、组件黑盒测试、组件白盒测试、WS及WSC测试及性能测试等方面综述当前研究热点难点,包括面向对象的建模、统计建模、控制流测试、数据流测试、数据组合测试、WS测试、WS组测试、WSC测试、协议测试、性能测试的负载模型与用户会话数据集的优化等问题.指出了有关研究的局限性.从模型驱动测试、基于Agent测试、WS及SOA测试、性能测试等方面探讨了Web应用测试未来的研究方向.     

基于本体相似的Web服务搜索

随着越来越多的Web服务被提交到UDDI注册中心注册,搜索一个合适的Web服务开始变得和在互联网上找到一个合适的页面同样困难。现有的技术主要是通过关键字匹配的技术来对UDDI注册中心Web服务的描述信息进行检索。但鉴于Web服务描述信息非常稀疏的特点,传统的信息检索技术并不能得到很好的效果,因此提出了基于本体的Web服务检索技术。在已有的对Web服务检索流程的改进的基础上,充分利用了从UDDI注册中心得到的Web服务描述信息,用本体来描述其内部的关系,并在此基础上应用本体相似技术来比较和匹配Web服务描述信息。     

面向应用的Web服务组合设计和验证框架

针对Web服务组合设计规范缺乏形式化的语义和验证方法的问题,提出了一个自顶向下的Web服务设计和验证的框架-iFrame4WS。在iFrame4WS中,将Web服务组合的设计方案划分为描述层、抽象层和执行层,并通过抽象层的形式化模型和形式化验证来检查Web服务组合的正确性。     

Web服务相容性的形式化描述与分析

Web服务的相容性分析是为了保证多个Web服务之间的正确交互。基于Pi-演算对Web服务的相容性进行了形式化的分析,给出了二个Web服务之间相容性的两个形式化定义。同时定义了二个Web服务进程之间的投影操作,在此基础上给出了多个Web服务之间相容性的形式化定义。     

基于三层组织模型的一种Web服务组合策略

在研究Web服务三层组织模型和有限状态自动机的基础上,提出了一种新的Web服务组合策略,给出了一个服务的可组合性定理,并证明了定理的正确性。该策略以Web服务三层组织模型为基础,简化了BPEL中基于有限状态自动机的Web服务自动组合,精简了服务组合流程。最后对这种新的组合策略的优缺点作了分析。     

服务网络：Web 服务组合的新基点*

在对W eb服务组合的研究工作回顾和总结的基础上,提出了依据组合过程中服务的复用程度对W eb服务组合进行分类的方法,建立了有关服务模式的概念;与此同时,提出服务网络(services network,SN)的概念来表达服务间的依赖、关系、属性和能力等语义关联。结合本体概念和模糊推理,将语义信息和对模糊信息的处理能力引入到服务的发现、匹配、组合过程中,使SN成为支撑动态、灵活、自主的服务组合的新基点.     

POESIA: An ontological workflow approach for composing Web services in agriculture

This paper describes the POESIA approach to systematic composition of Web services. This pragmatic approach is strongly centered in the use of domain-specific multidimensional ontologies. Inspired by applications needs and founded on ontologies, workflows, and activity models, POESIA provides well-defined operations (aggregation, specialization, and instantiation) to support the composition of Web services. POESIA complements current proposals for Web services definition and composition by providing a higher degree of abstraction with verifiable consistency properties. We illustrate the POESIA approach using a concrete application scenario in agroenvironmental planning.Received: 15 December 2002, Accepted: 16 April 2003, Published online: 30 September 2003Edited by: V. AtluriRenato Fileto: fileto@ic.unicamp.br     

Web服务安全架构研究

分析了Web服务的典型攻击技术，提取了Web服务的安全需求，然后提出了一种基于防护、检测、响应、恢复（PDRR）信息安全模型的Web服务安全架构，用以实现Web服务的综合防范。     

基于图的Web服务组合的研究

从Web服务质量入手,将QoS参数属性作为图的权重,提出了基于图的Web服务组合建模,并介绍了用不同的算法分别在模型上寻找解决方案.     

一种面向语义网服务的本体映射框架*

本体的异构性阻碍了语义网服务的互操作。从解决语义网服务中本体的异构问题出发,同时考虑到目前的本体映射系统大多效率不高、映射结果不够准确的问题,提出了一种适用于语义网服务的本体映射方法及系统框架。该方法利用机器学习技术来提高本体映射的自动化程度,利用综合评判技术修正映射结果,以提高本体映射的准确率。采用OAEI 2007的基准测试数据集benchmarks进行实验测试,结果表明本系统的性能基本达到预期效果,能够有效地解决语义网服务中的本体异构问题。     

An analysis of the driving forces for Web services adoption

Web services are supported by major IT vendors and have been adopted by some enterprises in various applications. However, due to the hype surrounding Web services, information technology (IT) personnel and business managers often have difficulty assessing the potential uses, impacts, and benefits of Web services. Based on literature review and technical information, as well as field and Web-based case studies, we have developed a framework for analyzing the driving forces for Web services adoption. The framework and detailed benefits analysis model can be used by IT and business strategy planners to identify technical options and business opportunities, as well as to formulate Web services implementation strategies.     

A model-driven development framework for enterprise Web services

The growing scale and complexity of the enterprise computing systems under distributed and heterogeneous environments present new challenges to system development, integration, and maintenance. In this paper, we present a model driven Web service development framework to combat these challenges. The framework capitalizes on the unified modeling language (UML) profile for enterprise distributed object computing (EDOC), MDA (model-driven architecture) and Web services. Within the framework, firstly, a general PIM (platform independent models) is created using the EDOC CCA structural specification and CCA choreography specification which defines the general functions of a system. Secondly, the general PIM is broken down into sub-PIMs according to functional decomposition, each of which can provide service independently and will be implemented in a Web service. Thirdly, all of the PIMs are transformed to Web service interface models for publication and invoking. Afterward, transform each PIM to a BPEL specified Web service orchestration model. Finally, supported by model transform techniques, the sub EDOC PIMs are implemented into Web services on specific platforms. Automatic model transformation is the key to this framework, therefore, the transformation from EDOC CCA models to WSDL specified Web service interface models and the transformation from EDOC CCA models to BPEL specified Web service orchestration models are deeply discussed, and the detailed transformation rules are proposed. A case study is also provided to demonstrate the effectiveness of these rules and the merits of this framework.

An agent-based data-flow testing approach for Web applications

In recent years, Web applications (WAs) have grown so quickly that they have already become crucial to the success of businesses. However, since they are built on Internet and open standard technologies, WAs possess their own unique features, such as dynamic behaviors, heterogeneous representations, and novel data handling mechanisms. These features provide concrete support to the success of WAs, but they bring new challenges to researchers and developers, especially in regard to testing WAs and ensuring their quality. Testing approaches for non-WAs have to be extended to handle these features before they are used in WA testing. This paper presents an agent-based approach to perform data-flow testing of WAs. More precisely, the data-flow testing will be performed by autonomous test agents at the method level, object level, and object cluster level, from low abstraction level to high abstraction level. In the process of the recommended data-flow testing, an agent-based WA testing system (WAT) will automatically generate and coordinate test agents to decompose the task of testing an entire WA into a set of subtasks that can be accomplished by test agents. The test agents, rooted in the Belief–Desire–Intention (BDI) model, cooperate with each other to complete the testing of a WA. An example is used to show the feasibility of the proposed approach.     

Web services reengineer RFID system

EPCglobal combines RFID system and Web services to construct EPCglobal Network. Web services are going to reengineer RFID system from its initial closed-cycle application to the current open public service. The starting point is an overview of the framework of EPCglobal Network, which provides a public service, and details on five components function. After that, two main technologies are presented in ECPglobal Network and the equivalent technologies are analyzed in Web services. Finally, a practical instance of application in shipment is illustrated.     

组合Web服务访问控制策略合成研究

针对Web服务多域环境下组合服务的访问控制策略合成问题,首先提出基于属性的Web服务访问控制策略描述框架,并结合原子属性值限制的属性描述方法,对服务访问控制策略进行了形式化表达。然后,通过分析服务组合描述文档中的控制结构,并研究访问控制策略合成算子和访问控制策略规则的合成运算,提出组合Web服务访问控制策略合成方法,实现了组合服务访问控制策略的合成。最后,结合实例给出组合Web服务的访问控制策略合成流程,验证了合成方法的实用性。