application, the ShoppingForce.com and two tenant-
specific virtual applications are also constructed to
demonstrate the feasibility of the service framework.
Moving ahead, further research is clearly required
to investigate approaches for enhancing the security
aspect of the proposed framework. Essentially, multi-
tenancy promotes resource sharing, which unavoid-
ably trades a certain amount of security for the lower
service costs. Fortunately, security issues caused by
resource sharing can be significantly reduced if the
multi-tenant SaaS application is deployed on a mid-
dleware platform that employs advanced access con-
trol and program monitoring mechanisms for inter-
cepting unauthorized accesses to a shared resource.
Hence we shall look into those mechanisms and in-
vestigate how to leverage them to prevent unautho-
rized data accesses, such as checking tenant ID’s. On
a different front, we are going to explore more trans-
parent ways, such as aspect-oriented programming or
dependency injection, to help developers transform a
single tenant enterprise application into a multi-tenant
one based on the proposed service framework with
less efforts.
ACKNOWLEDGEMENTS
This work is partially sponsored by Ministry of Sci-
ence and Technology, Taiwan, under grant 102-2221-
E-035-039 and 102-2627-E-002-001.
REFERENCES
Aarniala, J. (2005). Instrumenting java bytecode. In Sem-
inar work for the Compilerscourse, Department of
Computer Science, University of Helsinki, Finland.
Ambler, S. (2003). Agile database techniques: Effective
strategies for the agile software developer. John Wiley
& Sons.
Aulbach, S., Grust, T., Jacobs, D., Kemper, A., and Rit-
tinger, J. (2008). Multi-tenant databases for software
as a service: Schema-mapping techniques. In Pro-
ceedings of the 2008 ACM SIGMOD International
Conference on Management of Data.
Azeez, A., Perera, S., Gamage, D., Linton, R., Siriwardana,
P., Leelaratne, D., Weerawarana, S., and Fremantle, P.
(2010). Multi-tenant soa middleware for cloud com-
puting. In Cloud computing (cloud), 2010 ieee 3rd
international conference on. IEEE.
Bezemer, C.-P. and Zaidman, A. (2010). Challenges
of reengineering into multi-tenant saas applications.
Delft University of Technology, Tech. Rep. TUD-
SERG-2010-012.
Cai, H., Wang, N., and Zhou, M. J. (2010). A transparent
approach of enabling saas multi-tenancy in the cloud.
In Proceedings of IEEE World Congress on Services.
Chong, F. and Carroro, G. (2011). Architec-
ture strategies for catching the long tail. In
Available at: http://msdn.microsoft.com/en-
us/library/aa479069.aspx.
Fang, S. and Tong, Q. (2011). A comparison of multi-tenant
data storage solutions for software-as-a-service. In
Proceedings of the 6th International Conference on
Computer Science and Education(ICCSE 2011).
Galchev, G., Fleischer, C., Luik, O., Kilian, F., and Stanev,
G. (2007). Session handling based on shared session
information. US Patent App. 11/322,596.
Halili, E. H. (2008). Apache Jmeter: a practical beginner’s
guide to automated testing and performance measure-
ment for your websites. Packt Publishing.
Hall, R., Pauls, K., and McCulloch, S. (2011). OSGi in Ac-
tion: Creating Modular Applications in Java. Man-
ning Publications Company.
Joines, S., Willenborg, R., and Hygn, K. (2003). Perfor-
mance Analysis for Java Web Sites. Addison Wesley.
Koziolek, H. (2012). The sposad architectural style for
multi-tenant software applications. In Proceedings of
the 9th Working IEEE/IFIP Conferences on Software
Architecture.
Krebs, R., Momm, C., and Konev, S. (2012). Architec-
tural concerns in multi-tenant saas applications. In
Proceedings of the International Conference on Cloud
Computing and Service Science (CLOSER12).
Li, C. (2010). Transforming relational database into hbase:
A case study. In Software Engineering and Service
Sciences (ICSESS), 2010 IEEE International Confer-
ence on. IEEE.
Liao, C.-F., Chen, K., and Chen, J.-J. (2012). Toward a
tenant-aware query rewriting engine for universal ta-
ble schema-mapping. In Cloud Computing Technol-
ogy and Science (CloudCom), 2012 IEEE 4th Inter-
national Conference on.
Miller, F., Vandome, A., and John, M. (2010). DataNucleus.
VDM Publishing.
Momm, C. and Krebs, R. (2011). A qualitative discussion
of different approaches for implementing multi-tenant
saas offerings. In Proceedings of Software Engineer-
ing 2011, Workshop.
Pereira, J. and Chiueh, T. C. (2007). SQL Rewriting Engine
and its Applications, Technical Report. Stony Brook
University.
Russell, C. (2010). Java Data Objects 2.0. JSR 243 Specifi-
cation.
Schmidt, D. C., Stal, M., Rohnert, H., and Buschmann,
F. (1996). Pattern-Oriented Software Architecture,
Patterns for Concurrent and Networked Objects, vol-
ume 2. John Wiley & Sons.
Shimamura, H., Soejima, K., Kuroda, T., and Nishimura, S.
(2010). Realization of the high-density saas infras-
tructure with a fine-grained multitenant framework.
NEC Technical Journal, 5(2).
ICSOFT-EA2014-9thInternationalConferenceonSoftwareEngineeringandApplications
12