Semantic Descriptions ofWeb Services Security Constraints

Non-functional descriptions of web services and business rules play an important role in specification and analysis of the security constraints of Web services. As existing approaches do not provide logic and semantic model for the web services security constraints, sharing and reasoning over them are infeasible. The proposal builds upon the project AKT's work in defining a Semantic Web Constraint Interchange Format (CIF), which itself builds on the proposed Semantic Web Rule Language (SWRL). The main contributions of this paper are a new ontology for representing security constraints as policy and a semantic policy framework for the management of the policies; we also show the possibility to integrate the business rules and non-functional descriptions into policy specification by means of converting them into constraint satisfaction problem (CSP) using CIF