A stateful web service firewall for BPEL

Proceedings - 2007 IEEE International Conference on Web Services, ICWS 2007

Volumn , Issue , 2007, Pages 142-149

  Gruschka, Nils ^a   Jensen, Meiko ^a   Luttenberger, Norbert ^a  

^a UNIVERSITY OF KIEL   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION; COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; INFORMATION SERVICES; INTERNET PROTOCOLS; SPECIFICATIONS; WORLD WIDE WEB;

BUSINESS PROCESS EXECUTION LANGUAGE (BPEL); COMMUNICATION PROTOCOLS; DENIAL OF SERVICE (DOS) ATTACKS; INTERNATIONAL CONFERENCES; SECURITY VULNERABILITIES; WEB SERVICE COMPOSITION;

WEB SERVICES;

EID: 46849093205     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2007.173     Document Type: Conference Paper

References (21)

1. Tony Andrews, Francisco Curbera, Hitesh Dholakia, Yaron Goland, Johannes Klein, Frank Leymann, Kevin Liu, Dieter Roller, Doug Smith, Satish Thatte, Ivana Trickovic, and Sanjiva Weerawarana. Business Process Execution Language for Web Services Version 1.1, May 2003.
2. Tuomas Aura, Pekka Nikander, and Jussipekka Leiwo. DOS-resistant authentication with client puzzles. Lecture Notes in Computer Science, 2133:170+, 2001.
3. Anis Charfi and Mira Mezini. An aspect-based process container for BPEL. In AOMD '05: Proceedings of lhe 1st workshop on Aspect oriented middleware development, New York. NY. USA, 2005. ACM Press.
4. Erik Christensen, Francisco Curbera, Greg Meredith, and Sanjiva Weerawarana. Web Services Description Language (WSDL). W3C Note, 2001.
5. Francisco Curbera and Rania Khalaf. Implementing BPEL4WS: The Architecture of a BPEL4WS Implementation. Concurrency and Computation: Practice and Experience, 18:1219-1228, 2005.
6. Dorothy E. Denning. An Intrusion-Detection Model. IEEE Transactions on Software Engineering, 00:118, 1986.
7. Nils Gruschka and Norbert Luttenberger. Protecting Web Services from DoS Attacks by SOAP Message Validation. In Proceedings of the IFIP TC-11 21. International Information Security Conference (SEC 2006), 2006.
8. Martin Gudgin, Marc Hadley, Noah Mendelsohn, Jean-Jacques Moreau, and Henrik Frystyk Nielsen. SOAP Version 1.2 Part 1: Messaging Framework. W3C Recommendation, 2003.
9. Martin Gudgin, Marc Hadley, and Tony Rogers. Web Services Addressing 1.0 - SOAP Binding. W3C Recommendation, May 2006.
10. Meiko Jensen. Conception and Implementation of a BPEL Firewall. Diploma Thesis (german), 2007.
11. Hristo Koshutanski and Fabio Massacci. An Access Control Framework for Business Processes for Web Services. In XMLSEC '03: Proceedings of the 2003 ACM workshop on XML security, pages 15-24. New York. NY. USA, 2003. ACM Press.
12. J. Leiwo, P. Nikander, and T. Aura. Towards Network Denial of Service Resistant Protocols. In Proc. of the 15th International Information Security Conference (IFIP/SEC), 2000.
13. Pete Lindstrom. Attacking and Defending Web Service. A Spire Research Report, 2004.
14. John McHugh. Alan Christie, and Julia Allen. Defending yourself: The role of intrusion detection systems. IEEE Softwure, 17:42-51, 2000.
15. Jan Mendling, Mark Strembeck, Gerald Stermsek, and Gustaf Neumann. An Approach to Extract RBAC Models from BPEL4WS Processes. WET ICE 2004, 2004.
16. Jonathan K. Millen. A resource allocation model for denial of service. In Proceedings of the IEEE Symposium on Security and Privacy, pages 137-147, 1992.
17. Valentin Razmov. Denial of service attacks and how to defend against them. 2000.
18. Christoph L. Schuba, Ivan V. Krsul, Markus G. Kuhn, Eugene H. Spafford. Aurobindo Sundaram, and Diego Zamboni. Analysis of a Denial of Service Attack on TCP. In SP '97: Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 208-223, Washington, DC, USA, May 1997." IEEE Computer Society.
19. Clay Shields. What do we mean by network denial of service? In Proceedings of the 2002 IEEE Workshop on Information Assurance and Security, June 2002.
20. Wil M. P. van der Aalst, Marlon Dumas, and Arthur H. M. ter Hofstede. Web Service Composition Languages: Old Wine in New Bottles? In Proceedings of the 29th Euromicro Conference, pages 298-305, 2003.
21. Wil M. P. van der Aalst, Marlon Dumas, Arthur H. M. ter Hofstede, N. Russell, H. M. W. Verbeek, and P. Wohed. Life After BPEL? In WS-FM 2005, volume 3670 of Lecture Notes in Computer Science, pages 35-50, 2005.