University of Isfahan & Iranian Society of CryptologyJournal of Computing and Security2322-44602420151001Web Service Matchmaking based on Functional Similarity in Service Cloud25727021889ENKouroshMoradyanOmidBushehrianJournal Article20150629Nowadays increasing use of web as a means to accomplish daily tasks by calling web services, makes web services more and more significant. Users make a query on the Internet to find the required web service based on their needs. Cloud computing, due to its design and abundance of resources has become an ideal choice for web service providers to publish their services backed by cloud servers. The cloud can eliminate problems like web service availability and security. On the other side, obtaining the most relevant web service depends on user's request accuracy and the mechanism used to match the request. Due to recent shutting down of public UDDI registries, most of web service matchmaking mechanisms are based on web service description files (WSDL) which are published on the owners' websites. Semantic web services use OWL-S and WSMO instead of WSDL to describe services in a way that software agents are able to find appropriate services automatically. However, the high cost and effort needed to formally define web services makes this method impractical. In this paper we have proposed an ontology which formally models the user's query for web services in the service cloud by considering both functional and syntactical dimensions. The stepwise matchmaking method of web services based on the user's query is also presented. To show the precision of the proposed method, a set of experiments on a cluster of 3738 real web service WSDL documents has been performed.https://jcomsec.ui.ac.ir/article_21889_da36f1aab13fd4c97b19f21f51b7fef2.pdfUniversity of Isfahan & Iranian Society of CryptologyJournal of Computing and Security2322-44602420151001A Workload-Adaptable Method for Migrated Software to the Cloud27127921890ENZahraReisiComputer and IT Dep., shiraz University of Tech.OmidBushehrianComputer and IT Dep., shiraz University of Tech.FarahnazRezaeian ZadehFoolad Institute of TechnologyJournal Article20150726Due to the elastic nature of the cloud environments, migration of the legacy software systems to the cloud has become a very attractive solution for service providers. To provide Software-as-a-Service (SaaS), an application provider has to migrate his software to the cloud infrastructure. The most challenging issue in the migration process is minimizing the cloud infrastructure (VM's) costs while preserving the quality requirements of the service consumers. In this paper a self-adaptive method for migrated applications to the cloud is proposed in which an intelligent auto-scaling component continuously monitors the incoming application workloads and performs vertical or horizontal scaling. Since reacting to the transient workload changes always results in useless sequences of ``acquire-release'' actions of cloud resources and imposes unwanted overhead costs on the service provider, the auto-scaling component recognizes the transient workloads using a Learning Automata and only reacts to the stable ones. The OpenStack platform is used for evaluating the applicability of proposed method in real cloud environments. The experimental results demonstrate the ability of the proposed method in recognizing the transient workloads and consequently reducing the overall costs of the service provider.https://jcomsec.ui.ac.ir/article_21890_c228bbdcf13c3b9c7717c9b9f794fad8.pdfUniversity of Isfahan & Iranian Society of CryptologyJournal of Computing and Security2322-44602420151001A Context-Aware Reflective-State Framework to Reconfigure Service-Based Applications28129221891ENYousefRastegariDepartment of Electrical and Computer Engineering, Shahid Beheshti UniversityFereidoonShamsDepartment of Computer Engineering and Science, Shahid Beheshti University, Tehran, Iran.Journal Article20150825Service-based applications (SBA) offer flexible functionalities in wide range ofenvironments. Therefore, they should be able to dynamically adapt to differentquality concerns such as security, performance, etc. For example, we mayprovide secure services for the specific partners, or change SBA configurationbased on context information. In this paper, we present context models andfuzzy logic controllers to reconfigure SBA at runtime. To separate the controlaspects of SBA from its functionalities and maintain the states of SBA, weused Reflective-state pattern. Whenever context information changes, theviolated SBA instances enter the adaptation process and the control unit takescare of analyzing and selecting possible variants in the corresponding points.We used Jmeter load simulator and Zabbix monitoring system to measure theperformance improvement in our framework. Additionally we characterizedour work in comparison with related studies, according to S-CUBE adaptationtaxonomy.https://jcomsec.ui.ac.ir/article_21891_ec4c9d2c981c69d19b4baa174118fe06.pdfUniversity of Isfahan & Iranian Society of CryptologyJournal of Computing and Security2322-44602420151001Simulating the Resource Freeing Attack: Using Cloudsim Simulator29330221892ENShakibaNayebalsadrMortezaAnalouiSchool of Computer Engineering, Iran University of Science and Technology, Tehran, IranJournal Article20150825Virtualization is a technique to make the cloud computations secure. This technique can reduce the costs and increase the reliability of systems by means of sharing the physical resources between several VMs (Virtual Machines). However, virtualized environments are vulnerable to some security issues such as lack of performance isolation. These days, using the virtualization as a technique is growing slowly in large organizations. Despite these advantages, virtualizations have created several security challenges. So, the main concern of virtualization service providers and their customers is how to detect and encounter these security challenges. In this research, the resource freeing attack is selected among all available virtualization attacks because of its simplicity and its drastic effects. Resource freeing attack causes an unfair resource distribution among VMs. We use Cloudsim as a powerful cloud simulation toolkit to implement resource freeing attack. After simulating the attack, the CPU's efficiency, response time diagrams, and the obtained bandwidth are measured. The simulation results show the significant changes in VM behavior after occurring the attack in the virtualized environment. These changes help cloud providers to detect resource freeing attack in the cloud.https://jcomsec.ui.ac.ir/article_21892_6ae4f5faf4d7a7f46aedb3b82552646e.pdf