A Web service architecture for enforcing access control policies

Electronic Notes in Theoretical Computer Science

Volumn 142, Issue SPEC. ISS., 2006, Pages 47-62

  Ardagna, Claudio Agostino ^a   Damiani, Ernesto ^a   De Capitani Di Vimercati, Sabrina ^a   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

Author keywords

Distributed systems; Interoperability; Security; Web Services; XML

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; INTERNET; INTEROPERABILITY; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS; XML;

DISTRIBUTED SYSTEMS; SECURITY; WEB SERVICES;

WORLD WIDE WEB;

EID: 29244432152     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2004.09.044     Document Type: Conference Paper

References (29)

1. Damiani, E., S. De Capitani di Vimercati and P. Samarati, Towards Security XML Web Services, in Proc. of the 2002 ACM Workshop on XML Security, Washington, DC, USA, November 2002
2. Ardagna, C.A., and S. De Capitani di Vimercati, A comparison of modeling strategies in defining XML-based access control language, Computer Systems Science & Engineering Journal, 2004 (to appear)
3. Bonatti, P., and P. Samarati, A unified framework for regulating access and information release on the web, Journal of Computer Security, 10, 241-272
4. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati Securing SOAP E-services International Journal of Information Security (IJIS) 1 February 2002 100 115
5. Bacon, J., J.A. Hine, K. Moody, and W. Yao, An architecture for distributed OASIS services, In Proc. of the IFIP/ACM International Conference on Distributed Systems Platforms nd Open Distributed Processing, Hudson River Valley, New York, USA, April 2000
6. Koshutanski, H., and F. Massacci, An access control framework for business processes for web services, In Proc. of the 2003 ACM workshop on XML security, Fairfax, Virginia, November 2003
7. S. De Capitani di Vimercati, and P. Samarati Access control: Policies, models, and mechanisms Foundations of Security Analysis and Design 2001
8. E. Newcomer Understanding Web Services : XML, WSDL, SOAP, and UDDI 2002 Addison Wesley
9. B. Galbraith, W. Hankinson, A. Hiotis, M. Janakiraman, D.V. Prasad, R. Trivedi, and D. Whitney Professional Web Services Security December 2002 Wrox Press Ltd.
10. Web Services Architecture http://www.w3.org/TR/ws-arch/
11. R. Hoque CORBA 3 1998 IDG Books Worldwide Inc.
12. T. Bray, E. Maker, J. Paoli, and C.M. Spenberg-McQueen Extesible Markup Language (XML) 1.0 (Second Edition) World Wide Web Consortium (W3C) http://www.w3.org/TR/REC-xml October 2000
13. Apache XML Project http://xml.apache.org/
14. N. Bradley The XML Companion 3rd 2002 Addison Wesley
15. Official website for SAX http://www.saxproject.org/
16. Document Object Model (DOM) http://www.w3.org/DOM/
17. D. Box Simple Object Access Protocol (SOAP) 1.1 http://www.w3.org/TR/SOAP May 2000
18. R. Chinnici, M. Gudgin, J. Moreau, and S. Weerawarana Web Services Description Language (WSDL) version 1.2 World Wide Web Consortium (W3C) http://www.w3.org/TR/wsdl12 July 2002
19. UDDI Technical White Paper http://www.uddi.org
20. B. Atkinson, and G. Della-Libera Web services security (WS-Security) http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws-security.asp April 2002
21. D. Box Web Services Policy Framework (WS-Policy) version 1.1 http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws-policy.asp May 2003
22. G. Della-Libera Web Services Security Policy Language (WS-SecurityPolicy) version 1.0 http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws- securitypolicy.asp December 2002
23. D. Box Web Services Policy Assertions Language (WS-PolicyAssertions) version 1.1 http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws- policyassertions.asp May 2003
24. D. Box Web Services Policy Attachment (WS-PolicyAttachment) version 1.1 http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws-policyattachment.asp May 2003
25. D. Box OASIS eXtensible Access Control Markup Language TC http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml
26. S. Ambler, T. Jewell, and E. Roman Mastering Enterprise JavaBeans 2002 Wiley Computer Publishing
27. N. Brown, and C. Kindel Distributed Component Object Model Protocol http://www.globecom.net/ietf/draft/draft-brown-dcom-v1-spec-03.html
28. OASIS Security Services TC (SAML) http://www.oasis-open.org/committees/ tc_home.php?wg_abbrev=security
29. XML Schema http://www.w3.org/XML/Schema