Generic formal patterns for cloud native application development
Generic formal patterns for cloud native application development
With advances in cloud computing and distributed systems, cloud-native applications provide immense flexibility to developers in terms of building scaleable and efficient applications and systems. One of the predominant architectures that epitomises this shift in modern application development is the service-oriented architecture (SOA). While SOA offers developers significant flexibility during system development, it inadvertently increases overall system complexity, which may result in design and implementation flaws.
To deal with complexity, formal methods offer abstraction. By conceptualising systems at higher abstraction levels, they help developers and system architects achieve a better grasp of the system's entirety and its nuances.
Moreover, in service-oriented architecture and cloud-native applications, access control is a crucial component because it serves as the gatekeeper, specifying who can access the system or use which resources or services. Therefore, it should be designed robustly to protect resources and ensure the application's security.
In this research, we mainly focus on developing formal modelling patterns to assist cloud-native application developers in securely designing their cloud-native systems. Therefore, firstly, we will develop a set of formal modelling patterns for the functionalities of serverless systems in the Event-B environment. In the next stage, we incorporate an access control mechanism for the serverless system into our previously proposed patterns. Then, to illustrate the usefulness of our patterns and approach, we model two distinct scenarios of a project management application with serverless architecture. We conclude by summarising our findings and highlighting the research's prospective directions and potential applications.
formal modelling, formal methods, Event-B, serverless, AWS, Access Control, authorisation
University of Southampton
Yagmahan, Mehmet Said Nur
5424bf37-e3a7-4104-bc46-5d1fd99611a3
2024
Yagmahan, Mehmet Said Nur
5424bf37-e3a7-4104-bc46-5d1fd99611a3
Rezazadeh, Reza
ab1aeb76-9d41-4b46-820c-cc66b631cb99
Butler, Michael
54b9c2c7-2574-438e-9a36-6842a3d53ed0
Yagmahan, Mehmet Said Nur
(2024)
Generic formal patterns for cloud native application development.
University of Southampton, Doctoral Thesis, 145pp.
Record type:
Thesis
(Doctoral)
Abstract
With advances in cloud computing and distributed systems, cloud-native applications provide immense flexibility to developers in terms of building scaleable and efficient applications and systems. One of the predominant architectures that epitomises this shift in modern application development is the service-oriented architecture (SOA). While SOA offers developers significant flexibility during system development, it inadvertently increases overall system complexity, which may result in design and implementation flaws.
To deal with complexity, formal methods offer abstraction. By conceptualising systems at higher abstraction levels, they help developers and system architects achieve a better grasp of the system's entirety and its nuances.
Moreover, in service-oriented architecture and cloud-native applications, access control is a crucial component because it serves as the gatekeeper, specifying who can access the system or use which resources or services. Therefore, it should be designed robustly to protect resources and ensure the application's security.
In this research, we mainly focus on developing formal modelling patterns to assist cloud-native application developers in securely designing their cloud-native systems. Therefore, firstly, we will develop a set of formal modelling patterns for the functionalities of serverless systems in the Event-B environment. In the next stage, we incorporate an access control mechanism for the serverless system into our previously proposed patterns. Then, to illustrate the usefulness of our patterns and approach, we model two distinct scenarios of a project management application with serverless architecture. We conclude by summarising our findings and highlighting the research's prospective directions and potential applications.
Text
Thesis_Draft_MSN_postViva_final_pdf-A_
- Version of Record
Text
Final-thesis-submission-Examination-Mr-Mehmet-Yagmahan
Restricted to Repository staff only
More information
Published date: 2024
Keywords:
formal modelling, formal methods, Event-B, serverless, AWS, Access Control, authorisation
Identifiers
Local EPrints ID: 492154
URI: http://eprints.soton.ac.uk/id/eprint/492154
PURE UUID: 509b337e-4f23-4d60-adba-6e05cc53124a
Catalogue record
Date deposited: 18 Jul 2024 16:40
Last modified: 21 Sep 2024 01:40
Export record
Contributors
Author:
Mehmet Said Nur Yagmahan
Thesis advisor:
Reza Rezazadeh
Thesis advisor:
Michael Butler
Download statistics
Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.
View more statistics