SEWSEC: A Secure Web Service Composer using Information Flow Control | IEEE Conference Publication | IEEE Xplore

SEWSEC: A Secure Web Service Composer using Information Flow Control


Abstract:

In this paper, we describe SEWSEC, a Secure Web Service Composer that assists the system designer to secure his composed Web Services. The system designer can use standar...Show More

Abstract:

In this paper, we describe SEWSEC, a Secure Web Service Composer that assists the system designer to secure his composed Web Services. The system designer can use standard tools like BPEL to compose services and configures the security of some exchanged data and internal resources. By abstracting the system to a hierarchy of dependence graphs, SEWSEC applies an Information Flow Control verifying that the configuration ensures an end-to-end security. In case of insecure configuration, SEWSEC helps the designer to modify it and the security code is generated. A use case study on a real system illustrates SEWSEC practical usage, its interoperability with web services standards and its acceptable performance.
Date of Conference: 26-28 September 2011
Date Added to IEEE Xplore: 27 October 2011
ISBN Information:

ISSN Information:

Conference Location: Timisoara, Romania

References

References is not available for this document.