ESFORS 2007 Maribor Workshop - Complete Program |
| 10thJuly | |
| 09h30-10h00 | Welcome by Organisors and EC (Speech by Thomas Skordas) [PDF File] |
| 10h00-11h00 | Keynote speeches: |
| 1) |
Prof. Antonio Lioy (Dept. of Automation & Information, Politechnic of Turin, Italy)
"Future R&D in secure software systems and services." [PDF File] |
| 2) |
Prof. Miroslaw Malek (Chair of Computer Architecture & Communication, Institute for Information Humboldt-University of Berlin)
"The Power of Prediction for Adaptive, Dependable Service-oriented Computing." [PDF File] |
| 11h00-11h30 | Report on conclusions of previous Paris Workshop
[PDF File] |
| 11h30-13h00 | FP6 Security, Trust and Dependability Projects:
|
| 13h00-14h00 | Lunch break |
| 14h00-18h00 | 3 Parallel Sessions: complementing previous workshop (prioritisation and gap analysis). Sessions methodology: These sessions are conceived as a sequel of the first ESFORS workshop; therefore, their main topics are already implicitly defined by outcomes of this first workshop, and should serve as a guide for the discussions. 1) Participants should fill in the form (expression of interest/call for contributions) prepared and sent to them in advance. In this form, participants are asked to assign prioritisation from 1 to 10 and to send their contributions to broaden original topics by adding comments a) If relevant for session 1: gap analysis - what is there already available, what is needed etc b) If relevant for session 2: vision building - what will be future in regard to this topic, related technologies that could be introduced in the future c) If relevant for session 3: guidelines and recommendations - what actions are needed on short-medium term etc d) For all contributions: make links between topics where they see obvious similarities 2) A set of preferred topics for this session will be chosen and will be used to prepare introductory presentation. Short presentations and participants verbal contributions are welcome if sent to workshop@esfors.org in advance. After analysis of received contributions, the schedule for the possible short presentations and the timings for open discussions will be fixed. 3) Independently from the particular selected topics and proposed presentations, each session will be divided into the following four sequential parts addressing: a) How the selected topics have been managed/addressed/solved today b) What has not been covered/addressed yet (because of limits in approaches, restrictive and simplifying hypotheses in the design/modeling phase, lack of suitable technical solutions and so on and so forth) c) Future research directions to overcome the highlighted limits, weaknesses etc d) A rapporteur's short concluding presentation depicting the main lines of the sessions and drawing some early conclusions. |
| Session 1: | Engineering Dynamic & Ad-hoc Service Coalitions:
Design and operational (run-time) TSD aspects |
Rationale: Dynamic and ad-hoc service composition processes and resulting coalitions have been introduced already in FP6 and a number of security RTD projects addressed trust, security and dependability (TSD) issues that these new trends will impose during the service engineering lifecycle, as well as during the actual deployment and operation of such coalitions. Some of the solutions that these FP6 projects are working on are typically making assumptions that might (or might be not) true. Furthermore, they are usually validated and tested in controlled closed environments where threats and vulnerabilities, as well as number of possible service combinations, are limited. Some of the research topics identified in the first ESFORS workshop, such as "Processes", "Security Engineering", "Formal Methods, Semantics, Patterns, Design Tools, Validation Testing" , "Dynamic (run and real time) issues, context, dependence, complexity" etc belong to this group.
|
| Session 2: | Scalable and Adaptive Ubiquitous Service Infrastructures |
Rationale: Introduction of service oriented software and systems is bringing various new challenges, besides those related to dynamic and ad-hoc nature of service coalitions, and these have to be also taken into account. The main problem is, that at this stage, we are not even fully aware of possible problems that service orientation will bring, or, in some cases, we are not aware of the scale of potential problems. In other words, this session will deal with UNKNOWN or underestimated problems of future internet and service oriented software and systems. This includes prediction and behavioural analysis, scalability of services and infrastructure components, service mutations and adaptability, co-existence and compatibility, flexible TSD etc. We also need to address the current solutions that, while solving one particular problem, potentially introduce a new vulnerability or threat in the future service ecosystems. Some of the research topics identified in the first ESFORS workshop include virtualisation, trustworthy computing, trust and reputation engines, security as service, distributed authentication and authorisation services, but also issues not mentioned in the first workshop such as on demand security level (and TSD trade off mechanisms), hosting and outsourcing TSD, security process networks, event driven security etc.
Objective: |
| Session 3: | Alignment of Security and Trustworthy Services:
Interoperable security policies, business, socio-economic and legal aspects |
Note: This session was conducted in conjunction with Session #2 above
In the real world, decision making and investment in security is often a result of previous process, such as risk analysis, non-functional requirements, regulatory compliance etc. Building secure, yet dynamic business processes and business coalitions, should be also aligned with other issues such as business resilience or socio-economic aspects. Some of the research topics identified in the first ESFORS workshop include alignment with Business Objectives, change management, standardisation and certification, interoperability, openness, the management of the security lifecycle, dynamic risk assessment and risk management, metrics, multidisciplinary approach, legal, socio-economic and socio-technical dimensions.
In this session we look also on TSD environment and what we did wrong, what could have been done better or what changes have to be done in this environment. TSD is not standalone element nor does it have an objective in itself. This session should produce a list of recommendations of what further actions should complement technical work on secure services and systems.
|
| 11thJuly | |
| 08h30-09h30 | Keynote speeches |
| 1) |
Prof. Paulo Verissimo (Faculty of Sciences, University of Lisbon, Portugal)
"Resilience Challenges in Service-Oriented Architectures" [PDF File] |
| 2) |
Dr. Gregory (Grisha) Chockler (IBM, Haifa Research Laboratory)
"Towards a Peer-to-Peer Middleware Platform for Highly Scalable and Robust Service-Oriented Computing" [PDF File] |
| 09h30-12h30 | 3 Parallel Sessions: Sessions methodology: This session does not have a strong connection with past activities of ESFORS and therefore, it is more or less starting from newly proposed research topics and challenges. For this reason, we will have panel sessions, where the panellists lead the discussion, and promote the attendees' involvement at the same time. In order to enable registered attendees to contribute to the pre-selection of discussed topics, we foresee the following organizational steps: 1) Participants should fill in the form (expression of interest/call for contributions) prepared and sent to them in advance. In this form they should indicate their contributions (presentation or verbal) and indicate few keywords. Based on these contributions (to be sent to: workshop@esfors.org ), a set of preferred topics for this session and proposals for panel (selected from contributors) as well as for other shorter presentations in this session will be defined. After analysis of received contributions, the schedule for the possible short presentations and the timings for open discussions will be fixed. 2) Independently from the particular selected topics and proposed presentations, each session will be divided into the following four sequential parts addressing: a) How the selected topics have been managed/addressed/solved today b) What has not been covered/addressed yet (because of limits in approaches, restrictive and simplifying hypotheses in the design/modeling phase, lack of suitable technical solutions and so on and so forth) c) Future research directions to overcome the highlighted limits, weaknesses etc d) A rapporteur's short concluding presentation depicting the main lines of the sessions and drawing some early conclusions. 3) If possible, we will define four levels of uncertainty faced by session participants: a) Clear-enough future, where a single point forecast is precise enough to determine the course of action for TSD research topics. b) Alternate futures, where the future will be the outcome of one of alternate discrete situations. c) Range of futures, defined by a continuum of possible outcomes. d) True ambiguity, a situation where multiple uncertainties make the future of TSD research topic virtually impossible to predict. |
| Session 1: | Resilience in Service Oriented Infrastructures |
Rationale: The "services" notion provides for a wide range of on-demand, scalable and adaptive functionality extending beyond the constraints of classical "systems". It also makes the user transparent to the details of the systems/infrastructures providing the services. However, the SoI level transparency/adaptability comes at the cost of ever increasing complexity of the underlying service interactions, and the infrastructures provisioning the services. Obviously, the utility of SoI's exists if they can provide stable services, resilient to either system, network or user level disruptions. SoI-resilience is not only a fundamental challenge but also an unavoidable one to make SoI's meaningful. Objective: The objectives of this session will cover (a) specification of the SoI operational space (the services, their interactions, the infrastructural aspects), and the related resilience considerations, (b) the mechanisms to provide for resilience in SoI (design-stage, operational-stage) and (c) measures of resilience and their validation.
Chair: Dr. Edgar Weippl (Secure Business Austria) |
| Session 2: | Resilience in Software Systems and Services |
Note: This session was conducted in conjunction with Session #1 above
Rationale: Software and middleware increasingly determines the core functionality and the services offered by systems and Service oriented Infrastructures (SoI's). As the diversity and the underlying systems/SoI grow, it is the underlying SW/MW primitives that facilitate this growth. Unfortunately, to adapt to the dynamic growth of systems/SoI's, the SW/MW approaches are often reactive in nature, and with resilience as an add-on property. Our current SW engineering approaches to resilient SW/MW work well for discrete systems and applications. As large scale, adaptive functionality systems/SoI's are the future, and also operating in unpredictable environments, a paradigm shift in designing SW/MW is warranted! Especially the need to explicitly incorporate resilience into scalable, adaptive (for functionality, environment and threats) and distributed SW/MW design is needed. The need exists to develop theoretically well founded principles and practical techniques, methods and tools for engineering such future resilient software systems, middleware and services to help software designers and developers cope with the complexity of upcoming systems and SoI's. Objective:
The session aims to promote new software and middleware paradigms. The intended coverage is for design and development methodologies, practices, techniques and tools which will promote a resilience-driven approach to the design, performance, scalability, extensibility and maintainability of the resulting systems, together with means of assessing these properties at run-time.
|
| Session 3: | Resilience in Business Processes |
Rationale: This session is about governance and engineering at organisational level of resilient business-critical services, related business processes, and associated assets. In line with the other sessions, Resilience is interpreted as the ability of an organisation to perceive and cope with changes in the shape of risk induced by both internal and external events. The socio-technical nature of business organisation has a profound impact on how resilience can be achieved in business-critical services and processes. The specificity of human .components. (or .Liveware. as some authors refer to them) prevent from adopting at organisational level the traditional tools conceived for pure technical infrastructure. When considering complex socio-technical system like large business organisations, performance variability of people, along with variability of business, customer risk and technological environment, prevent from obtaining an adequate predictability of possible future events required by traditional risk models. In such a kind of contexts threats could also emerge from combination of normal behaviours. Resilience in business processes of organisations/enterprises, hence, requires both new conceptual tools and techniques and a shift towards a new resilient way of thinking.
The objectives of the session are to investigate: (a) which are the currently available solutions/practices to govern shift of processes, strategies, and responsibilities required to improve resilience and (b) directions and priorities for future scientific investigations. and technological developments.
|
| 13h00-14h00 | Lunch break |
| 14h00-15h00 | Conclusions and closing Plenary Session. [PDF File] |
Back to the ESFORS webpage