Logo des Repositoriums

Auflistung nach Schlagwort "microservice architecture"

1 - 2 von 2
  • ConferencePaper
    Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures
    (Software Engineering 2021, 2021) Gerking, Christopher; Schubert, David
    This publication is based on our paper presented at the IEEE International Conference on Software Architecture 2019. Due to their close interconnection with the outside world, cyber-physical systems are vulnerable to information leaks. Accordingly, it is crucial for software engineers to regulate and analyze the flow of information through systems. The microservice architectural style requires engineers to refine the regulations into security policies for the constituent software components. These policies must be composable to secure the information flow from end to end. However, since security is hard to compose, a composition of secure components may lead to an insecure system. In our paper, we enable microservice architectures of cyber-physical systems to be composed securely. First, we provide engineers with a set of architectural well-formedness rules for the refinement of security policies, ensuring composability if the constituent components communicate by message passing. Second, we present a verification technique to analyze whether the real-time message passing of components adheres to their refined security policies. Since the analysis results are securely composable, we assure engineers that a composition of secure components will always lead to a secure system. We evaluated the accuracy of our contributions using an extension of the CoCoME case study.
  • Konferenzbeitrag
    A Context Map as the Basis for a Microservice Architecture for the Connected Car Domain
    (INFORMATIK 2019: 50 Jahre Gesellschaft für Informatik – Informatik für Gesellschaft, 2019) Abeck, Sebastian; Schneider, Michael; Quirmbach, Jan-Philip; Klarl, Heiko; Urbaczek, Christof; Zogaj, Shkodran
    In the near future cars will have two properties: They will be electrically powered and they will be connected to the Internet. Such cars will provide a huge amount of sensor data which can be accessed via web APIs in order to develop innovative connected car applications, such as traffic control, hazard warning, assisted or even autonomous driving. However, current software solutions in this field are mainly monoliths solving single problems in an isolated way. Therefore, we propose a systematic approach by which each single connected car application becomes part of a microservice architecture. This approach requires a sound and well-elaborated domain model from which the microservices' APIs and implementation of the applications can be systematically derived. The main contribution of this paper is a context map for the connected car domain. We demonstrate a structured software development approach with the example of a mobile application, the Electric Car Charger, by showing how this application is integrated into the context map and, thus, into a connected car microservice architecture.