Web service authorization framework

Proceedings - IEEE International Conference on Web Services

Volumn , Issue , 2004, Pages 614-621

  Ziebermayr, Thomas ^a   Probst, Stefan ^a  

^a SOFTWARE COMPETENCE CENTER HAGENBERG   (Austria)

Author keywords

Authorization; Framework; Security; Service; Web Service

Indexed keywords

COMMUNICATION SECURITY; NETWORK SERVICES; SECURITY MODELS; WEB SERVICES; AUTHORIZATION; FRAMEWORK; SECURITY POLICY; SECURITY SERVICES;

COMPUTER SOFTWARE; CRYPTOGRAPHY; DECISION MAKING; ERROR ANALYSIS; INFORMATION TECHNOLOGY; SECURITY OF DATA; SERVERS; XML; CONTROL SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; LARGE SCALE SYSTEMS; MATHEMATICAL MODELS;

WORLD WIDE WEB;

EID: 4544266152     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2004.1314789     Document Type: Conference Paper

References (20)

1. A. Chaudhri, A. Rashid, R. Zicari, XML Data Management: Native XML and XML-Enabled Database Systems, ISBN 0-201-84452-4, Addison Wesley, 2003
2. Apache, Web Services - AXIS, http://ws.apache.org/axis/, December 2003
3. C. Lai, L. Gong, L. Koved, A. Nadalin, R. Schemers (1999) User Authentication and Authorization in the Java Platform. In Proc. 15th Annual Computer Security Applications Conference, Phoenix, AZ, USA, 1999
4. E. Jendrock, S. Bodoff, D. Green, K. Haase, M. Pawlan, B. Stearns (2002) The J2EE Tutorial, ISBN 0-201-79168-4, Addison Wesley, 2002
5. Foundstone Inc., CORE Security Technologies: Security in the Microsoft .NET Framework, http://www.foundstone.com/pdf/dotnet-security-framework.pdf.
6. H. Steiert, Towards a Component-based n-Tier C/S-Architecture, ISAW3 Orlando Florida USA, 1998
7. Jiffy Software, XACML Implementation, http://www.jiffysoftware.com/, 2003
8. OASIS, Extensible Access Control Markup Language (XACML) Version 1.1, Committee specification August 2003, http://www.oasis-open.org/committees/xacml/repository/cs-xacml-specification-1. 1.pdf, January 2003
9. PostgreSQL.org, PostgreSQL, http://www.postgresql.org/, January 2004
10. R. Sandhu, D. Ferraiolo, R. Kuhn, The NIST Model for Role-Based Access Control: Towards A Unified Standard. Proc. 5th ACM Workshop on Role-Based Access Control, July 2000.
11. R. Sandhu, P. Samarati; Authentication, Access Control, and Audit. ACM Computing Surveys, Vol. 28, No. 1, March 1996
12. Reiner Kraft; Designing a Distributed Access Control Processor for Network Services on the Web, ACM Workshop on XML Security, November 2002
13. Sun; XACML Implementation; http://sunxacml.sourceforge.net/; January 2004
14. Sun, Enterprise Java Beans Technologie, http://java.sun.com/products/ejb/, January 2004
15. Sun, Java 2 Platform, Enterprise Edition (J2EE), http://java.sun.com/j2ee/index.jsp, January 2004
16. Sun, Java Servlet Technologie, http://java.sun.com/products/servlet/index.jsp,January 2004
17. Sun, The Essentials of Filters, http://java.sun.com/products/servlet/Filters.html, January 2004
18. W. Essmayr, S. Probst, E. Weippl; Role-Based Access Controls: Status, Dissemination, and Prospects for Generic Security Mechanisms. Electronic Commerce Research Vol 4(1), pp. 127-156. Jan. 2004
19. W3C, SOAP Version 1.2 Part 1, http://www.w3.org/TR/SOAP/, June 2003
20. W3C, Web Service Architecture Requirements, http://www.w3.org/TR/2002/WD-wsa-reqs-20021114#id2604831, January 2004