A trust and context aware access control model for web services conversations

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4657 LNCS, Issue , 2007, Pages 115-124

  Coetzee, Marijke ^a   Eloff, J H P ^b  

^a UNIVERSITY OF JOHANNESBURG   (South Africa)

^b UNIVERSITY OF PRETORIA   (South Africa)

Author keywords

[No Author keywords available]

Indexed keywords

MATHEMATICAL MODELS; PROBLEM SOLVING; RESEARCH AND DEVELOPMENT MANAGEMENT; WEB SERVICES;

CONTEXT AWARE ACCESS CONTROL MODEL; WEB SERVICES CONVERSATIONS;

ACCESS CONTROL;

EID: 37249009106     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-74409-2_14     Document Type: Conference Paper

References (24)

1. Anderson, S., Bohren, J., Boubez, T., Chanliau, M., Della-Libera, G., Dixon, B.: Web Services Secure Conversation Language (WS-SecureConversation) (February 2005)
2. Atkinson, B., et al.: Web Services Security (WS-Security), Version 1.0 (5 April 2002), http://www.verisign.com/wss/wss.pdf
3. Banerji, A., Bartolini, C., Beringer, D., Chopella, V., Govindarajan, K., Karp, A.: Web Services Conversation Language (WSCL) (2002), http://www.w3.org/TR/wscl10/
4. Benatallah, B., Casati, F., Toumani, F., Hamadi, R.: Conceptual Modeling of Web Service Conversations. In: Eder, J., Missikoff, M. (eds.) CAiSE 2003. LNCS, vol. 2681, pp. 449-467. Springer, Heidelberg (2003)
5. Bhatti, R., Bertino, E., Ghafoor, A.: A Trust-Based Context-Aware Access Control Model for Web-Services. Distributed and Parallel Databases archive 18(1), 83-105 (2005)
6. Bhatti, R., Bertino, E., Ghafoor, A.: An integrated approach to federated identity and privilege management in open systems. Commun. ACM 50(2), 81-87 (2007)
7. Blaze, M., Feigenbaum, J., Ioannidis, J., Keromytis, A.D.: The role of trust management in distributed systems security. In Proceedings of Fourth International Workshop on Mobile Object Systems: Secure Internet Mobile Computations. In: Vitek, J. (ed.) Secure Internet Programming. LNCS, vol. 1603, pp. 185-210. Springer, Heidelberg (1999)
8. Chakraborty, S., Ray, I.: TrustBAC: integrating trust relationships into the RBAC model for access control in open systems. In: SACMAT 2006, pp. 49-58 (2006)
9. Coetzee, M., Eloff, J.H.P.: Towards Web Services access control. Computers and Security 23(7) (2004)
10. Coetzee, M., Eloff, J.H.P.: Autonomous trust for Web Services. Internet Research 15(5) (2005)
11. Coetzee, M., Eloff, J.H.P.: A Framework for Web Services Trust. In: 21st IFIP International Information Security Conference, Security and Privacy in Dynamic Environments, Karlstad University, 22 - 24 May, 2006, Karlstad, Sweden (2006)
12. Damiani, E., De Capitani Di Vimercati, S., Paraboschi, S., Samarati, P.: Fine-grained access control for SOAP e-services. In: Proceedings of the 10th International World Wide Web Conference (WWW10), May 1-5, 2001, Hong Kong (2001)
13. Della-Libera, G., et al.: Web Services Trust Language (WS-Trust) (2003), http://www.ibm.com/developerworks/library/ws-trust/index.html
14. Dey, A., Abowd, G.D.: Towards a Better Understanding of Context and Context-Awareness. In: the Workshop on The What, Who, Where, When, and How of Context-Awareness, 2000 Conference on Human Factors in Computing Systems, The Hague, The Netherlands (2000)
15. Dimitrakos, T.: A service-oriented trust management framework. In: Falcone, R., Barber, S., Korba, L., Singh, M.P. (eds.) AAMAS 2002. LNCS (LNAI), vol. 2631, pp. 53-72. Springer, Heidelberg (2003)
16. Gottschalk, K., Graham, S., Kreger, H., Snell, J.: Introduction to web services architecture. IBM Systems Journal 41(2) (2002)
17. Mecella, M., Ouzzani, M., Paci, F., Bertino, E.: Access control enforcement for conversation-based web services. In: WWW 2006, pp. 257-266 (2006)
18. Miao, L., He-Qing, G., Jin-Dian, S.: An attribute and role based access control model for Web services. In: International Conference on Machine Learning and Cybernetics, vol. 2, pp. 1302-1306 (2005)
19. Olson, L., Winslett, M., Tonti, G., Seeley, N., Uszok, A., Bradshaw, J.M.: Trust Negotiation as an Authorization Service for Web Services. In: ICDE Workshops, vol. 21 (2006)
20. Paurobally, S., Jennings, N.R.: Protocol engineering for web services conversations. Engineering Applications of Artificial Intelligence 18(2), 237-254 (2005)
21. Shen, H., Hong, F.: An Attribute-Based Access Control Model for Web Services. In: Proceedings of the Seventh International Conference on Parallel and Distributed Computing, Applications and Technologies, pp. 74-79 (2006)
22. Wonohoesodo, R., Tari, Z.: A Role based Access Control for Web Services, Services Computing. In: IEEE International Conference on (SCC'04), pp. 49-56 (2004)
23. Jajodia, S., Samarati, P., Subramanian, V.S.: A logical language for expressing authorisations. In: Proceedings of the 1997 IEEE Symposium on Security and Privacy, Oakland, CA, IEEE Computer Society Press, Los Alamitos (1997)
24. Li, N., Mitchell, J.C.: Datalog with constraints: A foundation for trust-management languages. In: Dahl, V., Wadler, P. (eds.) PADL 2003. LNCS, vol. 2562, pp. 58-73. Springer, Heidelberg (2002)