Application of formal methods to the analysis of Web Services Security

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3670 LNCS, Issue , 2005, Pages 215-229

  Tobarra, Llanos ^a   Cazorla, Diego ^a   Cuartero, Fernando ^a   Díaz, Gregorio ^a  

^a UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

Author keywords

Protocols and standards for WS; Secure electronic commerce; Security of WS

Indexed keywords

COMPUTER SCIENCE; NETWORK PROTOCOLS; SECURITY OF DATA; TELECOMMUNICATION SERVICES;

PROTOCOLS AND STANDARDS FOR WS; SECURE ELECTRONIC COMMERCE; SECURITY OF WS; WEB SERVICES BINDINGS;

WORLD WIDE WEB;

EID: 33646140557     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11549970_16     Document Type: Conference Paper

References (27)

1. T. Dierks; C. Allen. "The TLS Protocol. Version 1.0 ". RFC 2246. Standards track, Network Working Group, January 1999.
2. K. Bhargavan, C. Fournet, A.D. Gordon, and R.Corin. "Secure Sessions for Web Services". August 2004. At http://research.microsoft.com/projects/ samoa/secure-sessions-with-scripts.pdf.
3. K. Bhargavan, C. Fournet, and A.D. Gordon. Verifying policy-based security for web services. In CCS '04: Proceedings of the 11th ACM conference on Computer and communications security, pages 268-277, New York, NY, USA, 2004. ACM Press.
4. K. Bhargavan, C. Fournet, and A.D. Gordon, and R. Pucella. Tulafale: A security tool for web services. In Formal Methods for Components and Objects: Second International Symposium, FMCO 2003, volume 3188 of Lecture Notes in Computer Science, pages 197 - 222. Springer, November 2003.
5. E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. The MIT Press, 1999.
6. Formal Systems (Europe) Limited. FDR Manual. http://www.fsei.com/ fdr2_manual.html.
7. O. Alan Freier, Philip Karlton, and Paul C. Kocher. "The SSL Protocol Version 3.0". Internet draft, Netscape, March 1996.
8. G.Díaz, J. Pardo, E. Cambronero, V. Valero, and F. Cuartero. "Verification of Web Services with Timed Automata". 1st Int'l Workshop on Automated Specification and Verification of Web Sites, 2005.
9. C.A.R. Hoare. Communicating Sequential Processes. Prentice Hall, 1985.
10. IBM and Microsoft. "Security in a Web Services World: a proposed architecture and roadmap". http://www.-106.ibm.com/developerworks/library/ ws-secmap/, April 2002.
11. IBM, Microsoft, and VeriSign. "Web Services Security (WS-Security). Version 1.0". April 2002.
12. J.E. Johnson, D.E. Langworthy, L. Lamport, and F.H.Vogt. "Formal Specification of a Web Services Protocol". Electronic Notes in Theoretical Computer Science 105 (2004) 147-158, February 2004.
13. S. Kent and K. Seo. Security architecture for the internet protocol. Internet Draft, October 2004.
14. E. Kleiner and A.W.Roscoe. "Web Services Security: a preliminary study using Casper and FDR". Proceedings of the Workshop on Automated Reasoning for Security Protocol Analysis (ARSPA 2004), June 2004.
15. G. Lowe. Casper: A Compiler for the Analysis of Security Protocols. Journal of Computer Security, 6:53-84, 1998.
16. Microsoft. Microsoft Web Services Enhacements (WSE) 2.0. http://http://msdn.microsoft.com/webservices/building/wse/.
17. S. Nakijima. "On verifying Web Services Flows". Proc. SAINT 2002 Workshop, pages 223-224, January 2002.
18. OASIS. "Identity Federation. Liberty Alliance Project ", 2004.
19. OASIS. "UDDI Version 3.0.2". http://www.oasis-open.org/ committees/uddi-spec/doc/tcspecs.htm#uddiv3, October 2004.
20. OASIS, "eXtensible Access Control Markup Language (XACML) v2.0", February 2005.
21. OASIS. "Security Assertion Markup Language (SAML) v2.0 ", April 2005.
22. W3C. "Simple Object Access Protocol (SOAP) 1.1". http://www.w3c.org/TR/2000/NOTE-SOAP-20000508, May 2000.
23. W3C. "Web Services Description Language (WSDL) 1.1 ". http://www.w3.org/TR/wsdl, March 2001.
24. W3C. "XML Encryption Syntax and Processing". http://www.w3c.org/TR/2002/REC-xmldend-core-20021210, December 2002.
25. W3C. "XML Signature Syntax and Processing". http://www.w3c.org/TR/2002/REC-xmldsig-core-20020212, February 2002.
26. W3C. "Extensible Markup Language (XML) 1.1". http://www.w3.org/TR/2004/REC-xml11-20040204/, April 2004.
27. W3C. "Web Services Architecture". http://www.w3c.org/TR/2004/ NOTE-ws-arch-20040211, February 2004.