Abstract
A security architecture model for web services, Security extended-Resources, Services, Roles, Protocols and Methods (SX-RSRPM) model, was proposed based on the conceptions about security of web services and Degree of Safety for Web Services (DoS4WS), which is a qualitative analysis index of Web Services security, in the paper. This model could effectively increase the value of DoS4WS by the extended emerging XML-based security of protocol stacks and a new affiliated role as security CA center. In addition, an integrated security solution has been developed and the results in practice show that this solution can build a confidence security environment for all roles and provide a flexible and extensible security manage mechanism.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Ogbuji, U.: The Past, Present and Future of Web Services (Part I): What is Web Services?, http://www.webservices.org/index.php/article/articleview/663/1/61/2001.9
Hondo, M., Nagaratnam, N., Nadalin, A.: Securing Web Services. IBM Systems Journal 41(2), 228 (2002)
Yang, S., Lam, H., Su, S.Y.W.: Trust-Based Security Model and Enforcement Mechanism for Web Service Technology. In: Buchmann, A., Casati, F., Fiege, L., Hsu, M.-C., Shan, M.-C. (eds.) TES 2002. LNCS, vol. 2444, pp. 151–160. Springer, Heidelberg (2002)
Yang, S., Lam, H., Su, S.Y.W.: Trust-Based Security Model and Enforcement Mechanism. In: Buchmann, A., Casati, F., Fiege, L., Hsu, M.-C., Shan, M.-C. (eds.) TES 2002. LNCS, vol. 2444, p. 150. Springer, Heidelberg (2002)
Denker, G., Kagal, L., Finin, T., et al.: Security for DAML Web Services: Annotation and Matchmaking. In: Fensel, D., Sycara, K., Mylopoulos, J. (eds.) ISWC 2003. LNCS, vol. 2870, p. 335. Springer, Heidelberg (2003)
Lee, S.M., Kwon, O.S., Lee, J.H., et al.: Ty*SecureWS: An Integrated Web Service Security Solution Based on Java. In: Bauknecht, K., Tjoa, A.M., Quirchmayr, G. (eds.) EC-Web 2003. LNCS, vol. 2738, p. 186. Springer, Heidelberg (2003)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2004 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Rao, Y., Feng, B., Han, J. (2004). Security Architecture for Web Services. In: Jin, H., Pan, Y., Xiao, N., Sun, J. (eds) Grid and Cooperative Computing - GCC 2004. GCC 2004. Lecture Notes in Computer Science, vol 3251. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-30208-7_49
Download citation
DOI: https://doi.org/10.1007/978-3-540-30208-7_49
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-23564-4
Online ISBN: 978-3-540-30208-7
eBook Packages: Springer Book Archive