Access control enforcement for conversation-based web services

Proceedings of the 15th International Conference on World Wide Web

Volumn , Issue , 2006, Pages 257-266

  Mecella, Massimo ^a   Ouzzani, Mourad ^b   Paci, Federica ^c   Bertino, Elisa ^b  

^a SAPIENZA UNIVERSITY OF ROME   (Italy)

^b PURDUE UNIVERSITY   (United States)

^c UNIVERSITY OF MILAN   (Italy)

Author keywords

Access control; Conversations; Transition systems; Web services

Indexed keywords

ACCESS CONTROL; CLIENT SERVER COMPUTER SYSTEMS; DATA PRIVACY; MAXIMUM LIKELIHOOD ESTIMATION; NETWORK SECURITY; INTERNET; SECURITY SYSTEMS; WEB SERVICES;

ACCESS CONTROL POLICIES; CONVERSATIONS; SECURITY REQUIREMENTS; TRANSITION SYSTEMS;

WEB SERVICES; ACCESS CONTROL;

ACCESS CONTROL POLICIES; ACCESS POLICIES; CONVERSA-TIONS; DISTRIBUTED ENTERPRISE APPLICATION; FINAL STATE; SECURITY AND PRIVACY; SECURITY REQUIREMENTS; SERVICE ORIENTED COMPUTING; TRANSITION SYSTEMS;

EID: 34250616363     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1135777.1135818     Document Type: Conference Paper

References (19)

1. C. Ardagna, E. Damiani, S. De Capitani di Vimercati, and P. Samarati. A web service architecture for enforcing access control policies. In Proceedings of 1st International Workshop on Views on Designing Complex Architectures, 2004.
2. B. Benatallah, F. Casati, H. Skogsrud, and F. Toumani. Abstracting and enforcing web service protocol. International Journal of Cooperative Information Systems, 13(4), 2004.
3. B. Benatallah, F. Casati, and F. Toumani. Web service conversation modeling: A cornerstone for e-business automation. IEEE Internet Computing, 8(1):46-54, 2004.
4. D. Berardi, D. Calvanese, G. De Giacomo, M. Lenzerini, and M. Mecella. Automatic service composition based on behavioral descriptions. International Journal of Cooperative Information Systems, 14(4):333-376, 2005.
5. D. Berardi, D. Calvanese, G. De Giacomo, R. Hull, and M. Mecella. Automatic composition of transition-based semantic web services with messaging. In Proc. VLDB 2005.
6. E. Bertino, L. Martino, F. Paci, and A. Squicciarini. An adaptive access control model for web services. To appear on International Journal of Web Services Research (JWSR), 2006.
7. E. Bertino and R. Sandhu. Database security. Concepts, approaches, and challenges. IEEE Transactions on Dependable and Secure Computing, 2(1), January-March 2005.
8. L. Bordeaux, G. Salaün, D. Berardi, and M. Mecella. When are two web services compatible? In Technologies for E-Services, 5th International Workshop, TES 2004, Toronto, Canada, August 2004.
9. S. De Capitani di Vimercati and P. Samarati. Access control: policies, models and mechanisms. In R. Focardi and F. Guerrieri, editors, Foundations of Security Analysis and Design - Tutorial Lectures, volume 2171 of LNCS. Springer Verlag, 2001.
10. A. Dovier, C. Piazza, and A. Policriti. An efficient algorithm for computing bisimulation equivalence. Theoretical Computer Science, 311(1-3):221-256, 2004.
11. H. Koshutanski and F. Massacci. Interactive credential negotiation for stateful business processes. In Proc. iTrust 2005, 2005.
12. E. Nuutila and E. Soisalon-Soininen. On finding the strongly connected components in a directed graph. Information Processing Letters, 49:9-14, 1993.
13. S. Paurobally and N.R. Jennings. Protocol engineering for web services conversations. Engineering Applications of Artificial Intelligence, 18, 2005.
14. K.E. Seamons, M. Winslett, and T. Yu. Limiting the disclosure of access control policies during automated trust negotiation. In Proceedings of the Network and Distributed System Security Symposium, San Diego, California, USA, 2001.
15. E.G. Sirer and K. Wang. An access control language for web services. In Proc. ACM SACMAT 2002.
16. H. Skogsrud, B. Benatallah, and F. Casati. Trust-serv: model-driven lifecycle management of trust negotiation policies for web services. In Proc. World Wide Web Conference 2004.
17. C. Stirling. Modal and temporal logics for processes. In F. Moller and G.M. Birtwistle, editors, Logics for Concurrency. Structure versus Automata (8th Banff Higher Order Workshop, 1995, Proceedings), volume 1043 of LNCS. Springer Verlag, 1996.
18. R.E. Tarjan. Depth-first search and linear graph algorithms. SIAM Journal on Computing, 1:146-160, 1972.
19. R. Wonohoesodo and Z. Tari. A role based access control for web services. In Proc. 2004 Conference on Services Computing, 2004.