Model-driven security based on a web services security architecture

Proceedings - 2005 IEEE International Conference onServices Computing, SCC 2005

Volumn I, Issue , 2005, Pages 7-15

  Nakamura, Yuichi ^a   Tatsubori, Michiaki ^a   Imamura, Takeshi ^a   Ono, Koichi ^a  

^a IBM RESEARCH TOKYO   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

MODEL DRIVEN ARCHITECTURE (MDA); SECURITY ENVIRONMENT MODELS; SERVICE-ORIENTED ARCHITECTURE (SOA); WEB SERVICES SECURITY;

COMPUTER ARCHITECTURE; COMPUTER PROGRAMMING LANGUAGES; COMPUTER SYSTEM FIREWALLS; MATHEMATICAL MODELS; SECURITY OF DATA; USER INTERFACES; WEBSITES;

INFORMATION SERVICES;

EID: 33749040692     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SCC.2005.66     Document Type: Conference Paper

References (19)

1. A CBDI Report Series - Guiding the Transition to Web S ervices and SOA, http://www.cbdiforum.com/bronze/downloads/ws_roadmap_guide.pdf
2. Security in a Web Services World: A Proposed Architecture and Roadmap, Apr 7, 2002. http://www-106.ibm.com/developerworks/webservices/library/ws- secmap/
3. International Telecommunications Union-Telecommunication Standardization Sector Recommendation X.509 "Information Technology-Open Systems Interconnection - The Directory: Authentication Framework". (Equivalent to ISO 9594-8.)
4. Jason Carman, Kerberos: The Definitive Guide, Oreilly & Associates Inc., 2003
5. Premkumar T. Devanbu Stuart Stubblebine, Software Engineering for Security: a Roadmap, ICSE 2000.
6. Tatsubori, Imamura and Nakamura, Best Practice Patterns and Tool Support for Configuring Secure Web Services Messaging, ICWS 2004.
7. Web Services Security Policy Language (WS-SecurityPolicy), Dec 18, 2002. http://www-106.ibm.com/developerworks/library/ws-secpol/
8. Frankel, D: Model Driven Architecture, Addison-Wesley 2003.
9. Web Services Security: SOAP Message Security 1.0 (WS-Security 2004) OASIS Standard 200401, March 2004. http://docs.oasis-open.org/wss/2004/01/oasis- 200401-wss-soap-message-security-1.0.pdf
10. IBM WebSphere Application Server http://www-306.ibm.eom/software/ webservers/appserv/was/
11. IBM Rational Application Developer http://www-306.ibm.com/software/ awdtools/developer/application/index.html
12. Unified Modeling Language http://www.omg.org/technology/documents/formal/ uml.htm
13. Business Process Modeling Language (BPML), Business Process Management Initiative, Mar 8, 2001, http://www.bpmi.org/bpml.esp
14. Simon Johnston, Modeling security concerns in service-odented architectures, IBM developerWorks, 2004 http://www-106.ibm.com/developerworks/ rational/library/4860.html
15. Takeshi Imamura and Michiaki Tatsubori: Patterns for Securing Web Services Messaging, OOPSLA 2003 Work-shop on Web Services and Service Oriented Architecture Best Practice and Patterns, Anaheim, California, USA, November 26-31, 2003.
16. Web Services Security Kerberos Binding, IBM and Microsoft, 2003. ftp://www6.software.ibm.com/software/developer/library/ws-seckerb/ WS-Security-Kerberos.pdf
17. E. Baize and D. Pinkas, "Generic Security Service Application Program Interface Version 2 Update 1," RFC 2743, January 2000.
18. Jan Jurjens, UMLsec: Extending UML for Secure Systems Development, Proceedings of the 5th International Conference on The Unified Modeling Language (UML2002), Dresden, Germany, September 30 - October 4, 2002. Lecture Notes in Computer Science Vol. 2460, pp. 412-425, 2002.
19. Torsten Lodderstedt, David A. Basin, and Ju"rgen Doser, SecureUML: A UML-Based Modeling Language for Model-Driven Security Proceedings of the 5th International Conference on The Unified Modeling Language (UML2002), Dresden, Germany, September 30 - October 4, 2002. Lecture Notes in Computer Science Vol. 2460, pp. 426-441, 2002.