Specification and enforcement of access control in heterogeneous distributed applications

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2853, Issue , 2003, Pages 88-100

  Fink, Torsten ^a   Koch, Manuel ^a   Oancea, Cristian ^a  

^a FREIE UNIVERSITÄT BERLIN   (Germany)

Author keywords

Access control; CORBA; Interoperability; RBAC; Security management; SOAP based web services

Indexed keywords

ACCESS CONTROL; COMMON OBJECT REQUEST BROKER ARCHITECTURE (CORBA); ELECTRONIC DOCUMENT EXCHANGE; INDUSTRIAL MANAGEMENT; INTEROPERABILITY; MIDDLEWARE; SPECIFICATIONS; WEBSITES;

ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; BUSINESS APPLICATIONS; HETEROGENEOUS DISTRIBUTED APPLICATIONS; INTEGRATION OF SECURITY; RBAC; SECURITY MANAGEMENT; SOAP-BASED WEB SERVICES;

WEB SERVICES;

EID: 0142214884     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-39872-1_8     Document Type: Article

References (21)

1. Apache. Axis, http://ws.apache.org/axis/.
2. Apache. Tomcat, http://jakarta.apache.org/tomcat/index.html.
3. J. Barkley, A. Cincotta, D. Ferraiolo, S. Gavrila, and D. Kuhn. Role-based Access Control for the World Wide Web. In Proc. of the 20th National Information System Security Conference, 1997.
4. G. Brose. Access Control Management in Distributed Object Systems. PhD thesis, Freie Universität Berlin, 2001.
5. G. Brose. Raccoon - An infrastructure for managing access control in CORBA. In Proc. Int. Conference on Distributed Applications and Interoperable Systems (DAIS). Kluwer, 2001.
6. G. Brose. Manageable Access Control for CORBA. Journal of Computer Security, 4: 301-337, 2002.
7. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Fine Grained Access Control for SOAP E-Services. In Proc. of 10th WWW Conference, 2001.
8. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. A Fine-Grained Access Control System for XML Documents. ACM Transactions on Information and System Security (TISSEC), 5(2), 2002.
9. IBM. IBM Video Central for e-business tutorial, Version 7.2, 2002. http://www-106.ibm.com/developerworks/webservices/demos/videocentral/.
10. jiffySoftware. jiffyXACML. http://www.jiffysoftware.com/xacml/index.html, April 2003.
11. Microsoft. .Net Framework, http://www.microsoft.com/net/.
12. OASIS. Security Assertion Markup Language (SAML) v1.0 Specification, November 2002.
13. OASIS. Web Services Security: SOAP Message Security, Working Draft 11, March 2003.
14. OASIS. XACML 1.0 Specification, February 2003.
15. OMG. Common Object Request Broker Architecture: Core Specification V.S.0.2, December 2002.
16. R. Sandhu, D. Ferraiolo, and R. Kuhn. The NIST Model for Role-Based Access Control: Towards A Unified Standard. In Proc. of the 5th ACM Workshop on Role-Based Access Control. ACM, July 2000.
17. Ravi S. Sandhu, Edward J. Coyne, Hal L. Feinstein, and Charles E. Youman. Role-based access control models. IEEE Computer, 29(2): 38-47, February 1996.
18. E. G. Sirer and K. Wang. An Access Control Language for Web Services. In Proc. of 7th ACM Symposium on Access Control Models and Technologies, pages 23-30. ACM Press, 2002.
19. Sun. Sun's XACML Implementation, 2003. http://sunxacml.sourceforge.net/.
20. IONA Technologies. Enterprise Security in Web Services - White Paper, 2002.
21. S. Vinoski. Web Services Interaction Models. IEEE Internet Computing, pages 89-91, May/June 2002.