The paper Analyzing Compliance of Service-Based Business Processes for Root-Cause Analysis and Prediction by Carlos Rodriguez, Patricia Silveira, Florian Daniel and Fabio Casati (University of Trento) was presented in the occasion of the 1st Workshop on Engineering SOA and the Web (ESW'10) that was aimed at bringing together experts, both from industry and academia, who work on the interdependent context of SOA and Web applications and use engineering methods to make that link. The ideas and algorithms presented in this paper were validated on real data from an internal process of the Hospital San Raffaelle in Milan that provides the testbed for MASTER, to deploy the eHealth pilot use case.  

More about eHealth pilot use case study in MASTER  can be found in the Deliverable 1.2.1: MASTER Scenarios.

The paper by Gabriela Gheorghe, Stephan Neuhaus and Bruno Crispo from the University of Trento was accepted and published in the proceedings of the Annual IFIP WG 11.11 International Conference on Trust Management that took place on June 16 – 18 this year in Morioka, Iwate (Japan). 

In their paper authors propose xESB, an enhanced version of an Enterprise Message Bus (ESB), where they monitor and enforce preventive and reactive policies, both for access control and usage control policies, and both inside one domain and between domains. In addition, introduce indicators that help SOA administrators assess the effectiveness of their policies. Their performance measurements show that policy enforcement at the ESB level comes with only moderate penalties. 

The work published in the above mentioned paper has partially received funding from the 7^th Framework Programme under the MASTER project.

As the future internet of services evolves towards dynamic “service marketplaces”, where shared services are discovered, negotiated and choreographed at run-time, the new approaches to the compliance management in complex environments are needed. While enforcing compliance by proper choice, design and deployment of security controls remains an essential part of IT security consulting practise, this presentation describes a complementary mechanism that can be used to enforce compliance by deployment of reactive software components.  

The presentation Managing Compliance in Service Oriented Architectures by Aljosa Pasic will introduce MASTER in the conference Sodobne technologie in storitve. MASTER will be presented as a project that focuses on methodologies and tools that facilitate monitoring, enforcing, and auditing quantifiable metrics of the security, with a special focus on regulatory compliance in a highly dynamic service- oriented architecture and in multi-trust environments such as outsourcing scenarios.

The OTS 2010 conference takes place in Maribor (Slovinia) on June 15 – 16.

The article was published in the Italian magazine e-HealthCare Innovazione e tecnologia in sanità No. 2, 2010, page 48.

Hospital San Raffaele in Milan