An access control system for Web service compositions

Proceedings - 2007 IEEE International Conference on Web Services, ICWS 2007

Volumn , Issue , 2007, Pages 1-8

  Srivatsa, Mudhakar ^a   Iyengars, Arun ^b   Mikalsen, Thomas ^b   Rouvellou, Isabelle ^b   Jian, Yin ^b  

^a Georgia Institute of Technology   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL DECISIONS; ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; ACCESS CONTROL SYSTEMS; CONTROL RULES; INTERNATIONAL CONFERENCES; LINEAR TEMPORAL LOGIC (LTL); MULTIPLE SERVICES; PARAMETERIZED; POLICY SPECIFICATION LANGUAGES; ROLE HIERARCHIES; SEPARATION OF DUTIES; SERVICE COMPOSITIONS; SUPPLY-CHAIN MANAGEMENT (SCM); WEB APPLICATIONS;

CHEMICAL ANALYSIS; CONTROL SYSTEMS; INFORMATION SERVICES; PUBLIC KEY CRYPTOGRAPHY; SECURITY SYSTEMS; SEPARATION; SPECIFICATION LANGUAGES; SUPPLY CHAIN MANAGEMENT; SUPPLY CHAINS; TEMPORAL LOGIC; WEB SERVICES; WORLD WIDE WEB;

ACCESS CONTROL;

EID: 46849122230     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2007.31     Document Type: Conference Paper

References (24)

1. M. Abadi, M. Burrows, B. Lampson, and G. Plotkin. A calculus for access control in distributed systems. In ACM TOPLAS, 15(4), pp 706-734, 1993.
2. M. Abadi and C. Fournet. Access control based on execution history. In ISOC NDSS, 2003.
3. D. Box, F. Curbera, M. Hondo, C. Kaler, D. Langworthy, A. Nadalin, J. N. Nagaratnam, M. Nottingham, C. V. Riegen, and J. Shewchuk. Web services policy framework. http://www.ibm.com/developerworks/library/ws-polfram/.
4. D. Box, M. Hondo, C. Kaler, H. Maruyama, A. Nadalin, J. N. Nagaratnam, P. patrick, C. V. Riegen, and J. Shewchuk. Web services policy assertions language. http://www.ibm.com/developerworks/library/ws-polas/.
5. B. Carminati, E. Ferrari, and P. C. K. Hung. Security conscious web service composition. In ICWS, 2006.
6. F. Curbera, D. F. Ferguson, M. Nally, and M. L. Stockton. Towards a programming model for service-oriented computing. In ICSOC, 2005.
7. DAML. Automating DAML-S services composition using SHOP2. In 2nd ISWC, 2002.
8. G. Della-Libera, P. Hallam-Baker, M. Hondo, T. Janczuk, C. Kaler, H. Maruyama, J. N. Nagaratnam, A. Nash, R. Philpott, H. Prafullchandra, J. Shewchuk, and E. W. Zolfonoon. Web services security policy language. http://www.verisign.com/wss/WS-SecurityPolicy.pdf.
9. G. Edjlali, A. Acharya, and V. Chaudhary. History-based access control for mobile code. In 5th ACM CCS, 1998.
10. P. W. L. Fong. Access control by tracking shallow execution history. In IEEE Symposium on Security and Privacy, pp. 43-55, 2004.
11. K. Havelund and G. Rosu. Synthesizing monitors for safety properties. In 8th TACAS, Vol 2280 LNCS, pp 342-356, 2002.
12. R. J. Hayton, J. M. Bacon, and K. Moody. Access control in an open distributed environment. In IEEE Symposium on Security and Privacy, 1998.
13. K. Krakow, M. Nielsen, and V. Sassone. A framework for concrete reputation-systems with applications to history based access control. In 12th ACM CCS, 2005.
14. B. W. Lampson. Protection. In Proceedings of 5th Princeton Symposium on Information Sciences and Systems, pp. 437-443, 1974.
15. M. Mecella, M. Ouzzani, F. Pad, and E. Bertino. Access control enforcement for conversation-based web services. In 15th WWW Conference, 2006.
16. N. Mukhi and P. Plebani. Supporting policy-driven behavior in web services: Experiences and issues. In ICSOC, 2004.
17. A. Nadalin, C. Kaler, P. Hallam-Baker, and R. Monzillo. OASIS web services security: SOAP message security 1.0. http://oasis-open.org.
18. Oasis. OASIS extensible access control markup language (XACML). http://www.oasis-open.org.
19. A. Pnueli. The temporal logic of programs. In 18th Annual Symposium on FOCS, 1977.
20. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. In IEEE Computer, Vol. 29, No. 2, 1996.
21. E. G. Sirer and K. Wang. An access control language for web services. In 7th ACM SACMAT, 2002.
22. M. Solanki, A. Cau, and H. Zedan. Augmenting semantic web service description with compositional specification. In 13th WWW Conference, 2004.
23. B. Worthen. Supply chain management research. http://www.cio.com/ research/scm/edit/012202jcm.html.
24. WSI. Supply chain management use case model, http://www.wsi.org/.