A fine-grained access control model for Web services

Proceedings - 2004 IEEE International Conference on Services Computing, SCC 2004

Volumn , Issue , 2004, Pages 33-40

  Bertino, E ^a   Squicciarini, A C ^b   Mevi, D ^b  

^a Purdue University   (United States)

^b UNIVERSITY OF MILAN   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEM ADMINISTRATION; WEB SERVICES; WEB-BASED APPLICATIONS; ACCESS CONTROL; SECURITY TECHNOLOGIES; WEB APPLICATIONS; WEB SERVICE TECHNOLOGY;

ALGORITHMS; COMPUTER ARCHITECTURE; CUSTOMER SATISFACTION; INFORMATION RETRIEVAL; INTERNET; MATHEMATICAL MODELS; USER INTERFACES; WEBSITES; XML; COMPUTER SCIENCE; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; QUERY LANGUAGES; SECURITY OF DATA; SOFTWARE ENGINEERING; SPECIFICATIONS;

WORLD WIDE WEB;

EID: 4644227527     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RIDE.2004.1281700     Document Type: Conference Paper

References (14)

1. Advancing SAML, an XML-based security standard for exchanging authnetication and authorization information. http://www.oasis-open.org/ committees/security.
2. B.Atkinson et al. Web services security (ws-security), April 2002. http://msdn.microsoft.com/ws/2002/04/Security
3. T. Bellwood, L. Clment, D. Ehnebuske, A. Hately, M. Hondo UDDI Version 3.0., Published specification, 19 July 2002 http://uddi.org
4. E. Bertino, B. Carminati, E. Ferrari A flexible Authentication Method for UDDI Registries Proceedings of the 2003 International Conference on Web Services (ICWS'OS), Las Vegas. Nevada, USA, June 2003.
5. D. Box et. al. Simple Object Access Protocol (SOAP) 1.1, Technical Report W3C, 2000.
6. E. Damiani, S. Di Capitani di Vimercati, Towards securing XML Web services. Proceedings of the 2002 ACM workshop on XML security November 2002, Fairfax, VA.
7. E. Damiani, S. Di Capitani di Vimercati, Securing SOAP e-services International Journal of Information Security, 1 (2):100-115, February 2002.
8. Defining XACML, an XML specification for expressing policies for information access over the internet http://www.oasis-open.ord/committes/xacml
9. S. Farrell and R. Housley An Internet Attribute Certificate Profile for Authorization, RFC 3281, April 2002.
10. R. Housley, W. Polk, W. Ford and D. Solo. Internet X.509 Public Key Certificate and Certificate Revocation list (CRL). RFC 3280, Network Working G., April 2002.
11. Liberty Alliance Project http://www.projectliberty.org/
12. World Wide Web Consortium. Web Service http://www.w3.org/2002/ws/
13. World Wide Web Consortium XML Signature Syntax and Processing 2001 W3C Candidate Reccomendation http://www.w3.org/TR/2001/CR-xmldisigcore-20010419
14. Web Services Policy Framework (WSPolicy). Spec. http://www-106.ibm.com/ developerworks/librery/ws-polfram/