Seamless integration of dependability and security concepts in SOA: A feedback control system based framework and taxonomy

Recent research effort has been made to integrate both dependability and security concepts for SOA using fault taxonomy. However most of such work is confined to the SOA functionality layer excluding the interactions with its underlying distributed systems. Also many elements of taxonomies proposed are loosely integrated without generic interactive relationships. This is especially true when security attributes are included. There is a lack of framework that can systematically and genuinely integrate dependability and security concepts for SOA and also include underlying distributed systems of SOA. This paper attempts to address this issue by providing a taxonomy and framework from a new angle. The major contribution of this paper is that we have introduced a feedback control system as an integration vehicle to integrate concepts and attributes of both dependability and security in SOA, so that they can be more generically integrated and more systematically constructed. Furthermore, the framework proposed in this paper covers the SOA functionality layer and its underlying distributed systems. A novel idea of basic fault building blocks has been proposed to address the scalability issue due to layer interactions. Various fault taxonomies are constructed from these basic building blocks.