Emerging Standards for SOA Seminar Robert Marcus

Background of the Seminar

Original Motivation for the Seminar  Scheduled as a Seminar for DISA’s Net-Enabled Command Capability (NECC) Program  One in a series of Industry Day Seminars to present expertise from industry, research and standards groups to DISA  An example of a general middle–out strategy for systems of systems development based on Capabilities Mediation  Due to unforeseen circumstances, the Seminar had to be co- located with an OMG meeting  Proceedings are at “ dc/Emerging_Standards_forSOA.htm”

Capabilities Mediation Example from DISA System of Systems Program Management Vendors Open Source Libraries Standards Bodies Contractors Consumers Producers Systems Engineering (Mike Hebert) Emerging Technology Strategy (Bob Marcus) Needs Offerings (1)(2) (3) (4) (5) (6) (7) (8) (3) (7) (9) System of System Program solicited for ST&T needs Needs consolidated, prioritized and documented Needs sent to Emerging Technology Strategy Clarify need Match needs with offerings Evaluate producers Develop list of possible offerings Scrub list of offerings and do final offering selections, Ensure offerings meet needs and constrains and final acceptance for Program Capabilities Mediation Group

Middle Out Strategy for System of Systems Existing, Enhanced, Composite and possible new services and/or systems USERS Capability specifications (with priorities) and possible new capabilities Capability description (with cost of implementation) and possible new capabilities New capabilities available New capabilities needed Set of Services Set of Requirements Mediating User Requirements and Derived Requirements Matchmaking Systems Engineering Group Emerging Technology Group Capabilities Mediation Group

Implementation of Middle-Out Strategy  Organization – Capabilities Mediation Group that includes members of System Engineering and Emerging Technology Strategies Group  Domain – Partially understood problem space  Tools – Matchmaking, modeling and simulation  Process – Performs matchmaking. Reports results of matchmaking to other groups including gap analysis for new technology capabilities that must be developed and/or additional operational capabilities enabled by emerging technology.  Communication – Iterative discussions with both System Engineering and Emerging Technology Strategy Group  Skills – Understanding of technology descriptions and system specifications and the ability to resolve gaps

Middle Out Strategy for Federal Enterprise? Existing, Enhanced, Composite and possible new services and/or systems USERS Capability specifications (with priorities) and possible new capabilities Capability description (with cost of implementation) and possible new capabilities New capabilities available New capabilities needed Set of Services Set of Requirements Mediating User Requirements and Derived Requirements Matchmaking Federal CIOs Communities of Interest Chief Architects Forum

Agenda: Emerging Standards for SOA  Semantics for Web Service Specification: SDF and OWL-S (Chris Bashioum – Mitre & David Martin – SRI)  WS-Policy (Toufik Boulez - Layer 7 Technologies)  WS-Security and WS-I Basic Security Profile (Michael McIntosh - IBM )  Service Component Architecture and Eclipse SOA Development Tools (Michael Rowley - BEA & Pat Walsh – Iona)  Service Data Objects and Apache Tuscany (Daniel Murphy – IBM)  Model-based Data Engineering for Services (Michael Hieb - George Mason University)  Collaboration across standards groups on emerging SOA standards (James Odell - OMG )

SOA Standards Relationships Service Component Architecture Open SOA Standards Web Services Description Language (WSDL from W3C) Web Service Standards Development Apache Tuscany Eclipse SOA Development Tools C2 Model-Based Data Engineering Universal Description, Discovery and Integration (UDDI from OASIS) Submissions to W3C WS-Policy Assertions and Attachment Web Ontology Language (OWL-S) WSDL-S OASIS and WS-I Standards OASIS WS-Security WS-I Security Profiles Efficient XML Service Data Objects

Systems Development and Services Standards DoDAF DoD Architectural Framework across multiple levels (Zachman and MoDAF are similar) UPDM Unified Modeling Language (UML) Profile for DoDAF and ModAF SOA Architecture based on services SysML UML Extension for Systems Engineering FEA-DEA-BEA Federal and Defense Enterprise Architectures SCA Component Interface Description SCBA FEA extension to Services and Components SDF Service Interface Descriptions Layers Enterprise Architects Software Architects Program Architects System Architects and Engineers MDA UML Models for SW Architecture, Components and Interfaces Developers Testbeds such as Federated Development and Certification Environment (FDCE) Including Simulation, Executable Systems, Modules, Components and Services Services - EnterpriseSystems - Operations

Back-up Slides on Emerging SOA Standards

WS-Security and WS-I Security Profiles  WS-Security is a XML-based standard of the Organization for the Advancement of Structured Information Standards (OASIS) supporting signatures, tokens and encryption. “  The Basic Security Profile is a collection of interoperable security components that will be specified by the Web Services Interoperability (WS-I) organization “  The Basic Security Profile will be based on WS-Security specifications  There is also a WS-I Reliable Security Profile that will specify security components for the OASIS WS-ReliableMessaging standard

WS-Policy Framework  WS-Policy Framework is a W3C working draft that enable entities (e.g. services) to specify policies (e.g. capabilities, requirements and characteristics) “  WS-Policy Attachment has been submitted to W3C as a standard for attaching policies within XML descriptions or to general entities “  Policies can be used to specify security, QoS and other non- functional constraints  Policies consist of a set of policy alternatives that contain policy assertions

OWL-S and Service Definition Framework  The Web Ontology Language for Services (OWL-S) supplies markup capabilities for describing the properties and capabilities of Web Services  OWL-S has been submitted for comment to the W3C.  Relationship of OWL-S to WSDL and UDDI “ /”  The Service Definition Framework (SDF) uses OWL-S to describe interfaces to services “ !/WebHelp/Service_Definition_Framework/GIG_SDF_Implement ation_Documentation/1_Introduction.htm#1_1_Background”

Service Component Architecture  The Service Component Architecture is a model for building systems in Service Oriented Architectures being developed by the Open SOA Collaboration of most software companies “ ecture+Home”  SCA includes an Assembly model for components and composites that enables the use of multiple middleware connections and languages (e.g. Java, C++) “  SCA allows Policies to be attached to components and composites to constrain non-functional attributes “  The first application of the Policy Framework will be to create SCA Security Policy specifications 

Service Data Objects  Service Data Objects (SDO) is a data specification that provides a standard format for transporting and accessing data from applications and services written in multiple languages “  SDO was originally developed independently but is now being maintained by the Open SOA industry collaboration in conjunction with SCA  Data Access Services are used to interface SDO representations with multiple types of data sources including relational and XML databases. “

Apache Tuscany and Eclipse STP  Tuscany is an open source implementation of Service Data Objects and the Service Component Architecture under development by the Apache Consortium “  The SOA Tools Platform (STP) is an open source project of the Eclipse Foundation to build frameworks and tools that enabling the design, configuration, assembly, deployment, monitoring, and management of software designed around a Service Oriented Architecture “  There is also an Eclipse framework for Service Data Objects using Java interfaces “

Model-Based Data Engineering for WS  Interoperability of C2 services requires data integration at multiple levels; conceptual, attribute, and content  Complex data integration will require semantic modeling to support data mappings from heterogeneous sources “ _DesigningTheDRM_forDataAccessibility/Spot_IEEE_Internet_”  A common semantic data model is also necessary for composing C2 Web Services  C2IEDM can be used for initial testing  A Service Data Objects model is an alternative that could also include non-C2 data integration

Efficient XML  Standard compressed binary format for XML  Can provide significant benefits to all Web Services applications especially for mobile devices  Alternate approaches are under discussion as possible standards by the W3C at  One of the leading proposals is from AgileDelta Binary text conversions are implemented as a plug-in No changes are required to applications or XML APIs Some test evaluations have shown 10 to 100 times compression of XML data transmissions