As a promising, low-cost, and agile way to develop software, in recent years automatic service composition has been a popular research topic receiving a lot of attentions. For this topic, upon our long-term study and paper reviewed, we present technical survey and observation in this paper, including indispensable background and preliminary knowledge. The survey assumes under traditional composition context. Moreover, following the survey and observation, we suggest two approach patterns and point out possible future challenge as well as direction, especially to the influence of the mature of mobile devices and environment.

In recent years, automated service composition has been a fervid research area in service computing. Within this area, service description plays a crucial role in terms of the development of a diverse number of automation schemes. In this paper, we provide an investigation and classification of the service description approaches that have been used in a diverse collection of automated service composition studies. To position the service description approaches used in automated service composition throughout the service description world and to clearly classify them, we propose five two-value dimensions. Using the proposed dimensions, we first perform a categorization and provide a simple introduction to current representative industrial service description standards. Subsequently, because we discovered that most of the studied automated composition approaches follow a tuple-based service description paradigm, an exhaustive classification and discussion of this paradigm is made, with the automated composition approaches adopting this paradigm as an example. Finally, we discuss issues that are currently relevant to the service description field and possible solutions. With this study, the reader can obtain a complete understanding of service description approaches used in automated service composition research, including their common formulation and assumptions.

Phishing is now a serious threat to the security of Internet users' confidential information. Basically, an attacker (phisher) tricks people into divulging sensitive information by sending fake messages to a large number of users at random. Unsuspecting users who follow the instruction in the messages are directed to well-built spoofed web pages and asked to provide sensitive information, which the phisher then steals. Statistics published by the anti-phishing working group (APWG) show that, at the end of Q2 in 2008, the number of malicious web pages designed to steal users' confidential information had increased by 258% over the same period in 2007. Therefore, protecting users from phishing attacks is extremely important. Existing anti-phishing solutions detect mimicked phishing pages by either text-based features or visual similarities of web pages. The former one can be bypassed using image based phishing attacks while the latter one may suffer from great variants of phishing pages. In this paper, we propose a novel technique that identify the real domain name of a visiting web page based on signatures created for web sites. Site signatures, including distinctive texts and images, can be systematically generated by analyzing common parts from pages of a web site. On matching a signature, the domain name of the visiting URL is checked first and then redirected if the domain name is unmatched. The result shows the proposed method achieves a high accuracy and low error rates.

Service-oriented architecture implemented by Web Services is one of the most popular and promising software development paradigm that has brought some challenging research issues today. One of the most important issues is how to automate web service composition at design phase. Currently, there are many researchers concentrating on service composition problem that can be partitioned into three parts, dynamic workflow composition, QoS-aware, and transaction-aware service selection. This paper addresses the issue of automatic composing Web Services into an executable workflow not only according to user's functional requirements but also to their transactional properties and QoS characteristics. We propose an automatic composition approach through genetic algorithm to satisfy user's functional requirements, QoS criteria, and transactional requirements automatically at the same time. Experimental results are presented.

Developing the means by which to discover RESTful Web APIs/services is crucial to the further development of this technology. Unfortunately, existing search engines for RESTful Web APIs/services provide only keyword-based or tag-based search functions. A failure to take into account the semantics and/or characteristics (e.g., their interface compatibility) greatly hampers the ability to find suitable APIs/services. In this study, we propose a novel approach to the discovery of RESTful Web API/services, referred to as Test-Oriented API Search with Semantic Interface Compatibility (TASSIC). This scheme involves expanding the terms of Web API/service documents based on DBpedia and WordNet. Unsuitable APIs/services are then filtered out using a four-step process, as follows: 1) calculation of semantic similarity between a set of candidate APIs/services and a user query, 2) analysis of interface compatibility between candidate APIs/services using the Hungarian Algorithm, 3) invocation of candidate APIs/services to verify functionality and availability, and 4) analysis of similarity between the actual response of the candidate services and the expected response specified in the user query. Experiment results demonstrate the efficacy of TASSIC, the accuracy of which is superior to that of existing methods.