{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:54:55Z","timestamp":1781106895757,"version":"3.54.1"},"reference-count":32,"publisher":"IGI Global Scientific Publishing","issue":"3","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,7,1]]},"abstract":"<p>Service Oriented Architecture (SOA) is an architectural paradigm that enables dynamic composition of heterogeneous, independent, multi-vendor business services. A prerequisite for such inter-organizational workflows is the establishment of trustworthiness, which is mostly achieved through non-technical measures, such as legislation, and\/or social consent that businesses or organizations pledge themselves to adhere. A business process can only be trustworthy if the behavior of all services in it is trustworthy. Trusted Computing Group (TCG) has defined an open set of specifications for the establishment of trustworthiness through a hardware root-of-trust. This paper has three objectives: firstly, the behavior of individual services in a business process is formally specified. Secondly, to overcome the inherent weaknesses of trust management through software alone, a hardware root of-trust devised by the TCG, is used for the measurement of the behavior of individual services in a business process. Finally, a verification mechanism is detailed through which the trustworthiness of a business process can be verified.<\/p>","DOI":"10.4018\/jwsr.2010070103","type":"journal-article","created":{"date-parts":[[2010,7,1]],"date-time":"2010-07-01T08:39:06Z","timestamp":1277973546000},"page":"52-72","source":"Crossref","is-referenced-by-count":3,"title":["Behavioral Attestation for Web Services Based Business Processes"],"prefix":"10.4018","volume":"7","author":[{"given":"Masoom","family":"Alam","sequence":"first","affiliation":[{"name":"Institute of Management Sciences, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohammad","family":"Nauman","sequence":"additional","affiliation":[{"name":"Institute of Management Sciences, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinwen","family":"Zhang","sequence":"additional","affiliation":[{"name":"Samsung Information Systems America, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tamleek","family":"Ali","sequence":"additional","affiliation":[{"name":"Institute of Management Sciences, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick C. K.","family":"Hung","sequence":"additional","affiliation":[{"name":"University of Ontario Institute of Technology, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Quratulain","family":"Alam","sequence":"additional","affiliation":[{"name":"Institute of Management Sciences, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"jwsr.2010070103-0","doi-asserted-by":"crossref","unstructured":"Alam, M., Seifert, J., & Zhang, X. (2007). A model-driven framework for trusted computing based systems.","DOI":"10.1109\/EDOC.2007.52"},{"key":"jwsr.2010070103-1","doi-asserted-by":"crossref","unstructured":"Alam, M., Zhang, X., Nauman, M., & Ali, T. (2008). Behavioral attestation for web services (BA4WS).","DOI":"10.1145\/1456492.1456496"},{"key":"jwsr.2010070103-2","doi-asserted-by":"crossref","unstructured":"Alam, M., Zhang, X., Nauman, M., Ali, T., & Seifert, J. (2008). Model-based behavioral attestation.","DOI":"10.1145\/1377836.1377864"},{"key":"jwsr.2010070103-3","unstructured":"Anderson, S., Bohren, J., Boubez, T., Chanliau, M., Della-Libera, G., Dixon, B., et al. (2002). Web Services Trust Language (WS-Trust). Public draft release, Actional Corporation, BEA Systems, Computer Associates International, International Business Machines Corporation, Layer, 7."},{"key":"jwsr.2010070103-4","doi-asserted-by":"publisher","DOI":"10.1109\/4236.935172"},{"key":"jwsr.2010070103-5","doi-asserted-by":"publisher","DOI":"10.1007\/s10619-005-1075-7"},{"key":"jwsr.2010070103-6","doi-asserted-by":"crossref","unstructured":"Chen, L., Landfermann, R., L\u00f6hr, H., Rohe, M., Sadeghi, A., & St\u00fcble, C. (2006). A protocol for property-based attestation.","DOI":"10.1145\/1179474.1179479"},{"key":"jwsr.2010070103-7","unstructured":"DBAMP. N. I. R. D. F. P. (2008). Retrieved from http:\/\/serg.imsciences.edu.pk\/projects\/dbamp\/"},{"key":"jwsr.2010070103-8","doi-asserted-by":"publisher","DOI":"10.1147\/sj.432.0371"},{"key":"jwsr.2010070103-9","unstructured":"Foundation, E. (2001). Eclipse. Retrieved August 2004, from http:\/\/www.eclipse.org"},{"key":"jwsr.2010070103-10","unstructured":"Grawrock, D. (2006). The Intel safer computing initiative."},{"key":"jwsr.2010070103-11","unstructured":"Graz, T. U. O. (2008). Privacy CA. Retrieved from http:\/\/trustedjava.sourceforge.net\/index.php?item=pca\/about"},{"issue":"4","key":"jwsr.2010070103-12","doi-asserted-by":"crossref","first-page":"287","DOI":"10.3233\/JCS-1999-7403","article-title":"Modelling, specifying and implementing workflow security in cyberspace.","volume":"7","author":"E.Gudes","year":"1999","journal-title":"Journal of Computer Security"},{"key":"jwsr.2010070103-13","doi-asserted-by":"crossref","unstructured":"Huang, W., & Atluri, V. (1999). SecureFlow: a secure Web-enabled workflow management system.","DOI":"10.1145\/319171.319179"},{"key":"jwsr.2010070103-14","doi-asserted-by":"crossref","unstructured":"Jaeger, T., Sailer, R., & Shankar, U. (2006). PRIMA: policy-reduced integrity measurement architecture.","DOI":"10.1145\/1133058.1133063"},{"key":"jwsr.2010070103-15","doi-asserted-by":"crossref","unstructured":"K\u00fchn, U., Selhorst, M., & St\u00fcble, C. (2007). Realizing property-based attestation and sealing with commonly available hard-and software.","DOI":"10.1145\/1314354.1314368"},{"key":"jwsr.2010070103-16","doi-asserted-by":"crossref","unstructured":"Lorch, M., Proctor, S., Lepro, R., Kafura, D., & Shah, S. (2003). First experiences using XACML for access control in distributed systems.","DOI":"10.1145\/968559.968563"},{"key":"jwsr.2010070103-17","unstructured":"Loscocco, P., & Smalley, S. (2001). Meeting critical security objectives with security-enhanced linux."},{"key":"jwsr.2010070103-18","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2008.4"},{"key":"jwsr.2010070103-19","author":"F.Mayer","year":"2006","journal-title":"SELinux by example: using security enhanced Linux"},{"key":"jwsr.2010070103-20","doi-asserted-by":"crossref","unstructured":"Mitchell, C. (2005). Trusted Computing. Trusted computing, 1.","DOI":"10.1049\/PBPC006E_ch1"},{"key":"jwsr.2010070103-21","author":"S.Pearson","year":"2002","journal-title":"Trusted computing platforms: TCPA technology in context"},{"key":"jwsr.2010070103-22","author":"J.Poritz","year":"2004","journal-title":"Property attestation\u2014scalable and privacy-friendly security assessment of peer computers (Research Rep. No. RZ3548)"},{"key":"jwsr.2010070103-23","unstructured":"Sadeghi, A., & St\u00fcble, C. (2004). Property-based attestation for computing platforms: caring about properties, not mechanisms."},{"key":"jwsr.2010070103-24","unstructured":"Sailer, R., Zhang, X., Jaeger, T., & Van Doorn, L. (2003). Design and implementation of a TCG-based integrity measurement architecture."},{"key":"jwsr.2010070103-25","doi-asserted-by":"crossref","unstructured":"She, W., Yen, I., & Thuraisingham, B. (2008). Enhancing Security Modeling for Web Services Using Delegation and Pass-On.","DOI":"10.1109\/ICWS.2008.23"},{"key":"jwsr.2010070103-26","unstructured":"Shi, E., Perrig, A., & Van Doorn, L. (2005). Bind: A fine-grained attestation service for secure distributed systems."},{"key":"jwsr.2010070103-27","doi-asserted-by":"publisher","DOI":"10.1142\/S0218843003000814"},{"key":"jwsr.2010070103-28","author":"S.Weerawarana","year":"2005","journal-title":"Web Services Platform Architecture: SOAP, WSDL, WS-Policy, WS-Addressing, WS-BPEL, WS-Reliable Messaging and More"},{"key":"jwsr.2010070103-29","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2008.10"},{"key":"jwsr.2010070103-30","unstructured":"Winkler, T. (2006). Trusted Computing for the Java(tm) Platform. Retrieved from http:\/\/trustedjava.sourceforge.net\/index.php?item=pca\/about"},{"key":"jwsr.2010070103-31","doi-asserted-by":"crossref","unstructured":"Yoshihama, S., Ebringer, T., Nakamura, M., Munetoh, S., Mishina, T., & Maruyama, H. (2007). WS-attestation: Enabling trusted computing on Web services. Test and Analysis of Web Services, 441-469.","DOI":"10.1007\/978-3-540-72912-9_15"}],"container-title":["International Journal of Web Services Research"],"original-title":[],"language":"ng","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=45176","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T23:48:01Z","timestamp":1654127281000},"score":1,"resource":{"primary":{"URL":"https:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/jwsr.2010070103"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2010,7,1]]},"references-count":32,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2010,7]]}},"URL":"https:\/\/doi.org\/10.4018\/jwsr.2010070103","relation":{},"ISSN":["1545-7362","1546-5004"],"issn-type":[{"value":"1545-7362","type":"print"},{"value":"1546-5004","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,7,1]]}}}