Guarding sensitive information streams through the jungle of composite web services

Proceedings - 2007 IEEE International Conference on Web Services, ICWS 2007

Volumn , Issue , 2007, Pages 455-462

  Wei, Jinpeng ^a   Singaravelu, Lenin ^a   Pu, Calton ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CANNING; CHEMICAL ANALYSIS; INFORMATION SERVICES; WEB SERVICES; WORLD WIDE WEB;

COMPOSITE WEB SERVICES; CREDIT CARD; INTERNATIONAL CONFERENCES; ITS EVALUATION; LOW OVERHEAD; POLICY SPECIFICATION; PROTOTYPE IMPLEMENTATIONS; RESPONSE TIME; SENSITIVE DATA; SENSITIVE INFORMATIONS; SERVICE COMPOSITIONS; WEB SERVICE COMPOSITION;

SECURITY OF DATA;

EID: 46849121607     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2007.93     Document Type: Conference Paper

References (27)

1. Amoeba, http://www.cs.vu.nl/pub/amoeba/
2. Axis2 Architecture.http://ws.apache.org/axis2/1_0/Axis2ArchitectureGuide. html
3. Apache Axis2/Java.http://ws.apache.org/axis2.
4. D. E. Bell and L. La Padula. "Secure computer system: Unified exposition and multics interpretation". T.R. MTR-2997, Rev. 1, MITRE Corp., Bedford, MA, March 1976.
5. Elisa Bertino, J. Crampton, Federica Paci. "Access Control and Authorization Constraints for WS-BPEL". ICWS 2006.
6. rdACM CEC, 2001.
7. Trusted Computing Group. https://www.trustedcomputinggroup.org/home
8. Department of Defense. Trusted Computer System Evaluation Criteria (Orange Book), December 1985. DoD 5200.28-STD.
9. Dorothy E. Denning. "A lattice model of secure information flow". CACM, 19(5):236-243, May 1976.
10. J. Dorn, P. Hrastnik, A. Rainer. "Web Service Discovery and Composition for Virtual Enterprises". In Intl. Journal of Web Services Research, Vol. 4, No. 1, page 23-29, 2007.
11. P. Efstathopoulos, et al. "Labels and event processes in the Asbestos operating system". In Proc. of the 20th SOSP, pages 17-30, October 2005.
12. Butler Lampson. "A note on the confinement problem". CACM, Vol. 16, Issue 10 (Oct. 1973), 613-615.
13. Henry M. Levy. "Capability-Based Computer Systems". Digital Press, 1984.
14. Andrew C. Myers, Barbara Liskov. "Protecting Privacy Using the Decentralized Label Model". ACM TOSEM, Vol. 9, No. 4, October 2000.
15. OWL Web Ontology Language Overview. http://www.w3.org/TR/owl-features/
16. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification, W3C Recommendation, April 2002. http://www.w3.org/TR/P3P/
17. Axis2/Java - Rampart.http://ws.apache.org/axis2/modules/rampart/1_1/ security-module.html
18. L. Singaravelu, C. Pu, H. Haertig and C. Helmuth. "Reducing TCB Complexity for Security-Sensitive Applications: Three Case Studies". In Eurosys 2006.
19. Trail: The Reflection API. http://java.sun.com/docs/books/tutorial/ reflect/index.html
20. Web Services Security v1.1. http://www.oasis-open.org/specs/index. php#wssv1.1
21. Web Services Security Conversation Language. http://www.w3.org/TR7wsc110/
22. Web Services Security Policy Language. http://xml.coverpages.org/WS- SecurityPolicyV11-200507.pdf
23. Web Services Trust Language. ftp://www6.software.ibm.com/software/ developer/library/ws-trust.pdf
24. WebTrust. http://www.webtrust.net/
25. Li Xiong, Ling Liu. "Peer-Trust: Supporting Reputation-Based Trust for Peer-to-Peer Electronic Communities". IEEE TKDE, Vol.16, No. 7. Special issue on Peer to Peer Based Data Management, pp 843-857. July 2004.
26. Wei Xu, V.N. Venkatakrishnan, R. Sekar, and I.V. Ramakrishnan. "A Framework for Building Privacy-Conscious Composite Web Services". ICWS 2006.
27. Jia Zhang, Liang-Jie Zhang, Jen-Yao Chung. "WS-trustworthy: A Framework for Web Services Centered Trustworthy Computing". In SCC 2004.