Negotiated security policies for E-services and Web Services

Proceedings - 2005 IEEE International Conference on Web Services, ICWS 2005

Volumn 2005, Issue , 2005, Pages 612-619

  Yee, George ^a   Korba, Larry ^a  

^a NATIONAL RESEARCH COUNCIL CANADA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; INTERNET; SECURITY OF DATA; SECURITY SYSTEMS; WORLD WIDE WEB;

E-SERVICE SECURITY; SECURITY POLICY; WEB SERVICES ENVIRONMENT;

TELECOMMUNICATION SERVICES;

EID: 33749042338     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2005.85     Document Type: Conference Paper

References (20)

1. J. Joshi et al, "Security Models for Web-Based Applications", Communications of the ACM, Vol. 44, No. 2, pp. 38-44, February 2001.
2. V. Varadharajan, "A Multilevel Security Policy Model for Networks", Proceedings, Ninth Annual Joint Conference of the IEEE Computer and Communication Societies (INFOCOM 90), Vol. 2, pp. 710-718, June 3-7, 1990.
3. S. Duflos, "An Architecture for Policy-Based Security Management for Distributed Multimedia Services", Proceedings, Multimedia '02, Juan-les-Pins, France, Dec. 1-6, 2002.
4. P. Dinsinore et al, "Policy-Based Security Management for Large Dynamic Groups: An Overview of the DCCM Project", Proceedings, DARPA Information Survivability Conference and Exposition, 2000 (DISCEX'00), Vol. 1, pp. 64-73, Jan. 25-27, 2000.
5. st International Symposium on Information and Communication Technologies,pp. 487-492, Dublin, Ireland, 2003.
6. th International Workshop on Policies for Distributed Systems and Networks (POLICY'03), Lake Como, Italy, June 4-6, 2003.
7. Y. Yang, Z. Fu, and S. Wu, "Bands: An Inter-Domain Internet Security Policy Management System for IPSEC.VPN", Proceedings, IFIP/IEEE Eighth Int'l Symposium on Integrated Network Management, March 2003.
8. th Annual 2003 Int'l Carnahan Conference on Security Technology,pp. 38-42, Oct. 14-16,2003.
9. H. Khurana et al, "Integrated Security Services for Dynamic Coalitions", Proceedings, DARF'A Information survivability Conference and Exposition (DISCEX'03), Washington D.C., U.S.A., April 2003.
10. th Annual Computer Security Applications Conference (ACSAC '99), pp. 219-228, Dec. 6-10, 1999.
11. E. Bertino, E. Ferrari, A. Squicciarini, "Trust Negotiation: Concepts, Systems, and Languages", Computing in Science and Engineering, pp. 27-34, July/August 2004.
12. M. Winslett et al, "Negotiating Trust on the Web", IEEE Internet Computing, pp. 30-37, November/December 2002.
13. W. Winsborough and N. Li, "Safety in Automated Trust Negotiation", Proceedings, 2004 IEEE Symposium on Security and Privacy (S&P'04), pp. 147-160, May 9-12, 2004.
14. G. Yee, L. Korba, "Semi-Automatic Derivation and Use of Personal Privacy Policies in E-Business", International Journal of E-Business Research, Vol. 1, No. 1, Idea Group Publishing, 2005.
15. International Organization for Standardization, "ISO 7498-2, Information Processing Systems - Open Systems Interconnection - Basic Reference Model - Part 2: Security Architecture", as of Feb. 11, 2004, available from: http:llwww.iso.org/
16. International Telecommunication Union Telecommunication Standardization Sector (ITU-T), "Recommendation X.800, Security Architecture for OSI", as of Feb. 11, 2004, available from: http://www.itu.intlrec/recommendation.asp? type=items&lang=e&parent=T-REC-X.800-199103-1
17. G. Yee, L. Korba, "The Negotiation of Privacy Policies in Distance Education", Proceedings, 14th IRMA International Conference, Philadelphia, Pennsylvania, May 18-21, 2003.
18. G. Yee, L. Korba, "Bilateral E-services Negotiation Under Uncertainty", Proceedings, The 2003 International Symposium on Applications and the Internet (SAINT2003), Orlando, Florida, Jan. 27-31, 2003.
19. M. O'Neill et al, Web Services Security. McGraw-Hill/Osborne, 2003.
20. Telecom Italia Lab, "JADE (Java Agent Development Framework)", available as of Feb. 14, 2005, from: http://jade.tilab.com/