3PAC: Enforcing access policies for Web Services

Proceedings - 2005 IEEE International Conference on Web Services, ICWS 2005

Volumn 2005, Issue , 2005, Pages 589-596

  Van Bemmel, Jeroen ^a   Wegdam, Maarten ^a,b   Lagerberg, Ko ^a  

^a LUCENT TECHNOLOGIES   (United States)

^b UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

Distributed access control; Policy enforcement; Web Services security

Indexed keywords

COMPUTER ARCHITECTURE; DATA PRIVACY; INTEROPERABILITY; SECURITY OF DATA; WORLD WIDE WEB;

DISTRIBUTED ACCESS CONTROL; POLICY ENFORCEMENT; SERVICE ORIENTED ARCHITECTURE; WEB SERVICES SECURITY;

TELECOMMUNICATION SERVICES;

EID: 33749067816     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2005.2     Document Type: Conference Paper

References (17)

1. R. Agrawal et al, "Vinci: A service-oriented architecture for rapid development of web applications", in WWW 10 Hongkong, May 01
2. R. Bhatti, E. Bertino and A. Ghafoor, "A Trust-based Context-Aware Access Control Model for Web-Services", Proc. ICWS04 pp. 184-192
3. L. Gong, "A secure identity-based capability system", Proceedings of the IEEE Symposium on Security and Privacy, pages 56-63, 1989
4. J.S. Park and R.S. Sandhu, "Role-based access control on the web", ACM Transactions on Information System Security (volume 4 #1), 2001 pp 37-71
5. R. S. Sandhu, et al. "Role-Based Access Control Models", IEEE Computer 29(2): 38-47, IEEE Press, 1996
6. H. M. Levy. "Capability-Based Computer System",. Digital Press, 1984
7. J. Biskup and S. Wortmann, "Towards a credential-based implementation of compound access control policies", Proceedings of SACMAT'04 pp 31-40
8. Liberty ID-WSF Discovery protocol v1.1, http://www.projectliberty.org/ specs/libertyidwsf-disco-svc-v1.1.pdf
9. L. Zhang, G. Ahn and B. Chu, "A rule-based framework for role-based delegation and revocation", ACM Transactions on Inf. Syst. Security, vol 6 no 3 2003 pp. 404-441
10. M. N. Huhns and M. P. Singh, "Service Oriented Computing: Key Concepts and Principles", IEEE Internet Computing, vol. 9, no. 1, 2005, pp.75-81.
11. Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) v1.1, OASIS Standard, 2003.
12. B. Clifford Neuman and Theodore Ts'o, "Kerberos: An Authentication Service for Computer Networks", IEEE Communications, 32(9):33-38. September 1994
13. B. Clifford Neuman. Proxy-based authorization and accounting for distributed systems, Proc. of the 13th International Conference on DC Systems, pp. 283-291, May 1993
14. Web Services security Kerberos token profile, http://www.oasisopen.org/ committees/download.php/1049/WSS -Kerberos-03.pdf (visited 20/12/2004)
15. Web Services Security: SOAP Message Security 1.0, OASIS Standard, 2004.
16. Web Services Security: UsernameToken Profile 1.0, OASIS Standard, 2004.
17. Web Services Security: SAML Token Profile 1.0, OASIS Standard, 2004.