Judith Ellen Yarranton Rossebø

• Rossebø, Judith Ellen Yarranton & Runde, Ragnhild Kobro (2008). Specifying Service Composition Using UML 2.x and Composition Policies. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 5301, p. 520–536. Full text in Research Archive
• Amyot, Daniel; Becca, Hanana; Bræk, Rolv & Rossebø, Judith Ellen Yarranton (2008). Next Generation Service Engineering, Proceedings of the ITU-T NGN Kaleidoscope Conference. IU-T. ISSN 9789261124410. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Cadzow, Scott & Sijben, Paul (2007). eTVRA, a Threat, Vulnerability and Risk Assessment Method and Tool for eEurope. In Tho, Nguyen Man (Eds.), Proceedings from the Second International Conference on Availability, Reliability and Security (ARES 2007). IEEE (Institute of Electrical and Electronics Engineers). ISSN 9780769527758. p. 925–933. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv (2006). A Policy-driven Approach to Dynamic Composition of Authentication and Authorization Patterns and Services. Journal of Computers. 1(8). Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Skagestein, Gerhard; Haug, Vegard & Nødtvedt, Einar (2006). How to create trust in electronic voting over an untrusted platform. GI-Edition Lecture Notes in Informatics (LNI). ISSN 1617-5468. p. 86–86. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Sibjen, Paul (2006). Security Issues in Voice over IP. Telektronikk. ISSN 0085-7130. 102(1). Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv (2006). Towards a Framework of Authentication and Authorization Patterns for Ensuring Availability in Service Composition. In Society, IEEE Computer (Eds.), First International Conference on Availability, Reliability and Security (ARES'06). IEEE (Institute of Electrical and Electronics Engineers). ISSN 9780769525679. p. 206–215. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Lund, Mass Soldal; Husa, Knut Eilif & Refsdal, Atle (2006). A conceptual model for service availability. In Gollmann, Dieter (Eds.), Quality Of Protection - Security Measurements and Metrics. Springer Publishing Company. ISSN 9780387290164. p. 107–118. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Cadzow, Scott & Sijben, Paul (2006). eTVRA, a threat, vulnerability and risk assessment tool for eEurope. In Stølen, Ketil (Eds.), Trust Management - 4th International Conference, iTrust 2006. Springer. ISSN 9783540342953. p. 467–471. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Cadzow, Scott & Sijben, Paul (2006). eTVRA, a threat, vulnerability and risk assessment tool for eEurope. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 3986. doi: 10.1109/ARES.2007.82. Full text in Research Archive

View all works in NVA

• Rossebø, Judith Ellen Yarranton (2008). Proceedings of the Third International Conference on Availability, Reliability and Security. IEEE (Institute of Electrical and Electronics Engineers). ISBN 9780769531021. 700 p. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2008). Proceedings of the ITU-T NGN Kaleidoscope Conference. IU-T. ISBN 9789261124410. 200 p. Full text in Research Archive

View all works in NVA

• Rossebø, Judith Ellen Yarranton (2008). Dynamic Service Composition. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2008). Telenor and TISPAN NGN. Full text in Research Archive
• Amyot, Daniel; Becca, Hanana; Bræk, Rolv & Rossebø, Judith Ellen Yarranton (2008). Next Generation Service Engineering. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv (2008). Using Composition Policies to Manage Authentication and Authorization Patterns and Services. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Pearce, Arlene & Jensen, Terje (2008). On Understanding availability of services based on IP Multimedia Subsystem. Full text in Research Archive
• Pearce, Arlene; Jensen, Terje & Rossebø, Judith Ellen Yarranton (2008). Combining IMS and Web 2.0 -- Assessing the Service Availability. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2008). NGN Security Standards for Fixed Mobile Convergence - R2 and Beyond. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Runde, Ragnhild Kobro (2008). Specifying Service Composition Using UML 2.x and Composition Policies. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2007). eTVRA, a Threat, Vulnerability and Risk Assessment Method and Tool for eEurope. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2007). NGN Security standards for Fixed-Mobile Convergence. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv (2006). Towards a Framework of Authentication and Authorization Patterns for Ensuring Availability in Service Composition. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2005). Nye standarder for sikkerhet og tillit i Europa. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton; Lund, Mass Soldal; Husa, Knut-Eilif & Refsdal, Atle (2005). A Conceptual Model for Service Availability. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2004). Patterns to ensure availability in service composition. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2004). An analysis of IPsec deployment performance issues in high and low power devices. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2003). Authentication issues in multi-service residential access networks. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton (2009). Dynamic Composition of Services– a Model-Based Approach. Norges teknisk-naturvitenskapelige universitet. ISSN 9788247117194. Full text in Research Archive Show summary

  This thesis addresses the problem of rapid development and dynamic deployment of services in the distributed service environment. It is not enough to deploy services rapidly, as the dynamic service environment is changing continually, requiring services to be adaptable also. By this we mean, that in addition to being able to rapidly deploy new services, it must be possible to dynamically change existing services to adapt to conditions in the service environment that were not foreseen when the service was originally deployed. In this environment, service availability is an important concern. Traditionally, availability has been seen as an atomic property asserting the average time a system is "up" or "down". In order to model and analyse the availability of computerised systems in a world where the dependency on and complexity of such systems are increasing, this notion of availability is no longer sufficient. This thesis provides a conceptual model for service availability designed to meet the challenges of ensuring availability in a rapidly changing telecommunications environment. The core of this model is a characterisation of service availability by means of accessibility properties and exclusivity properties, which is further specialised into measurable aspects of service availability. One of the core challenges of service engineering is to find practical ways to model services (partial functionalities) separately such that services may be composed into well functioning systems while satisfying availability requirements. This is especially challenging for services being provided in a distributed manner requiring cooperation of several components and actors (users). This thesis presents a policy-driven methodology and approach for modelling dynamic composition of services. This involves a model-driven concept for enabling dynamic composition of separately specified service parts. We demonstrate this concept for dynamically adding authentication and authorization to existing services, as a means to provide and restrict access to the service for authorized users only. The concept of a policy enforcement state machine (PESM) diagram and composition policies are used to model dynamic composition of services. The PESM diagrams and composition policies specify the coordination of separately specified UML2.x collaborations.  

• Bræk, Rolv & Rossebø, Judith Ellen Yarranton (2009). Methodology for Policy-Enabled Dynamic composition of services. Department of Telematics, NTNU. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv (2008). Using Composition Policies to Manage Authentication and Authorization Patterns and Services. Department of Telematics, NTNU. ISSN 9788299398053. Full text in Research Archive
• Rossebø, Judith Ellen Yarranton & Bræk, Rolv Richard Berven (2007). Towards a Framework of Authentication and Authorization Patterns for Ensuring Availability in Service Composition. Universitetet i Oslo. Full text in Research Archive Show summary

  During the past decade, the telecommunication environment has evolved from single operator featuring voice services to multi-operator featuring a range of different types of services. Services are being provided today in a distributed manner in a connectionless environment requiring cooperation of several components and actors. This report focuses on the incremental means to ensure access to services for authorized users only by composing authentication and authorization patterns and services. We propose a novel framework of authentication and authorization patterns for securing access to services for authorized users only, and we demonstrate how the patterns can be dynamically composed with services using a policy-driven approach.

• Rossebø, Judith Ellen Yarranton; Lund, Mass Soldal; Husa, Knut Eilif & Refsdal, Atle (2006). A conceptual model for service availability. Universitetet i Oslo. Full text in Research Archive Show summary

  Traditionally, availability has been seen as an atomic property asserting the average time a system is "up" or "down". In order to model and analyse the availability of computerised systems in a world where the dependency on and complexity of such systems are increasing, this notion of availability is no longer sufficient. This report presents a conceptual model for service availability designed to handle these challenges. The core of this model is a characterisation of service availability by means of accessibility properties and exclusivity properties, which is further specialised into measurable aspects of service availability. We outline how this conceptual model may be refined to a framework for specifying and analysing availability requirements.

View all works in NVA