XML security - A comparative literature review

Journal of Systems and Software

Volumn 81, Issue 10, 2008, Pages 1715-1724

  Ekelhart, Andreas ^a   Fenz, Stefan ^a   Goluch, Gernot ^a   Steinkellner, Markus ^b   Weippl, Edgar ^b  

^a Secure Business Austria   (Austria)

^b VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

Privacy; Web services; XML encryption; XML key management; XML security; XML signature

Indexed keywords

CONCENTRATION (PROCESS); CRYPTOGRAPHY; INFORMATION MANAGEMENT; MARKUP LANGUAGES; STANDARDIZATION; STANDARDS;

CURRENT STATE; KEY-MANAGEMENT; LITERATURE REVIEWS; MILLENIUM; MOBILE COMPUTING; PRIVACY; SECURITY STANDARDS; WEB SERVICES; WORKING GROUPS; XML ENCRYPTION; XML KEY MANAGEMENT; XML SECURITY; XML SIGNATURE;

XML;

EID: 48649102412     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2007.12.763     Document Type: Article

References (55)

1. Alvaro G., Farrell S., Lindberg T., Lockhart R., and Zhang Y. XKMS working group interoperability status report. Public Key Infrastructure vol. 3545 (2005), Springer, Berlin/Heidelberg 86-99
2. Barhoom T., and Zhang S.-S. Trusted exam marks system at IUG using XML-signature. Fourth International Conference on Computer and Information Technology. CIT'04' (2004), VCH 288-294
3. Beznozov K., Flinn D.J., Kawamoto S., and Hartman B. Introduction to web services and their security. Information and security Technical Report 10 1 (2005) 2-14
4. Boyer J.M. Bulletproof business process automation: securing XML forms with document subset signatures. XMLSEC'03: Proceedings of the 2003 ACM Workshop on XML security (2003), ACM Press 104-111
5. Boyer, J., 2006. Applying XML signatures to xforms-based documents, in 'XML Conference 2006, Boston, USA'. .
6. Boyer, J., Landwehr, D., Merrick, R., Raman, T., Dubinko, M. Klotz, L., 2006. 'Xforms 1.0 (second edition) W3C recommendation'. .
7. Bull L., and Squire D.M. XML signature extensibility using custom transforms. Web Information Systems (WISE 2004) vol. 3306 (2004), Springer, Berlin/Heidelberg 102-112
8. Bull L., Stanski P., and Squire D.M. Content extraction signatures using XML digital signatures and custom transforms on-demand. WWW'03: Proceedings of the 12th International Conference on World Wide Web (2003), ACM Press 170-177
9. Bull L., Squire D.M., and Zheng Y. A hierarchical extraction policy for content extraction signatures. International Journal on Digital Libraries 4 3 (2004) 208-222
10. Camenisch J., Gross T., and Sommer D. Enhancing privacy of federated identity management protocols: anonymous credentials in ws-security. WPES'06: Proceedings of the 5th ACM Workshop on Privacy in Electronic Society (2006), ACM Press 67-72
11. Chang T.-K., and Hwang G.-H. The design and implementation of an application program interface for securing XML documents. Journal of Systems and Software 80 8 (2007) 1362-1374
12. Chen K.-Y., Huang C.-C., Hou T.-W., Lee T.-C., Yang S.-F., and Cheng P.-W. A quick xml parser for extracting signatures of secure web services. The Fifth International Conference on Computer and Information Technology. CIT 2005' (2005), IEEE Computer Society 1093-1098
13. Cho K.M. XML security model for secure information exchange in e-commerce. Computational Science and Its Applications - ICCSA 2006' vol. 3983 (2006), Springer, Berlin/Heidelberg 1003-1011
14. Delgado J., Gallego I., and Perramon X. Broker-based secure negotiation of intellectual property rights. Information security vol. 2200 (2001), Springer, Berlin/Heidelberg
15. Geuer-Pollmann C. XML pool encryption. XMLSEC'02: Proceedings of the 2002 ACM Workshop on XML security (2002), ACM Press 1-9
16. Giereth M. On partial encryption of RDF-graphs. The Semantic Web (ISWC 2005) vol. 3729 (2005), Springer, Berlin/Heidelberg 308-322
17. Hormann T.P., Wrona K., and Holtmanns S. Evaluation of certificate validation mechanisms. Computer Communications 29 3 (2006) 291-305
18. Hung M.-H., Chen K.-Y., Ho R.-W., and Cheng F.-T. Development of an e-diagnostics/maintenance framework for semiconductor factories with security considerations. Advanced Engineering Informatics 17 3-4 (2003) 165-178
19. Hussain O., and Soh B. Maintaining the integrity of XML signatures by using the manifest element. Industrial Electronics Society, IECON 2004, 30th Annual Conference of IEEE' vol. 1 (2004), IEEE Computer Society 493-495
20. Hwang G.-H., and Chang T.-K. An operational model and language support for securing XML documents. Computers and security 23 6 (2004) 498-529
21. Imamura T., Clark A., and Maruyama H. A stream-based implementation of XML encryption. XMLSEC 2002: Proceedings of the 2002 ACM Workshop on XML security (2002), ACM Press 11-17
22. Kim J., and Moon K. Design of unified key management model using XKMS. 7th International Conference on Advanced Communication Technology, ICACT 2005' vol. 1 (2005), IEEE Computer Society 77-80
23. Kim Y.-H., Kim J.-S., Kim Y.-S., and Shim J.-S. A two-phase local server security model based on XML certificate. Computational Science and Its Applications - ICCSA 2006 vol. 3984 (2006), Springer, Berlin/Heidelberg 968-978
24. Kubbilun W., Gajek S., Psarros M., and Schwenk J. Trustworthy verification and visualisation of multiple XML-signatures. Communications and Multimedia security vol. 3677 (2005), Springer, Berlin/Heidelberg 311-320
25. Lee J.S., Moon K.Y., and Sohn S.W. ESES/signature and its applications for secure data exchange. IEEE 5th International Workshop on Networked Appliances (2002), IEEE Computer Society 45-50
26. * securews: an integrated web service security solution based on java. E-Commerce and Web Technologies vol. 2738 (2003), Springer, Berlin/Heidelberg 186-195
27. Lee J., Upadhyaya S.J., Rao H.R., and Sharman R. Secure knowledge management and the semantic web. Communication ACM 48 12 (2005) 48-54
28. Lee S.-H., Choi B.-S., Lee J.-S., Moon K.-Y., and Lee J.-K. Vo authentication framework in grid environment using digital signature. Computational Science and Its Applications - ICCSA 2006 vol. 3981 (2006), Springer, Berlin/Heidelberg 945-953
29. Lim H.-Y., Kim Y.-G., Moon C.-J., and Baik D.-K. Bundle authentication and authorization using XML security in the osgi service platform. ICIS'05: Proceedings of the Fourth Annual ACIS International Conference on Computer and Information Science (ICIS05)' (2005), IEEE Computer Society 502-507
30. Lu E.J.-L., and Chen R.-F. An XML multisignature scheme. Applied Mathematics and Computation 149 1 (2004) 1-14
31. Lu W., Slominski A., Chiu K., and Gannon D. A streaming validation model for soap digital signature. 14th IEEE International Symposium on High Performance Distributed Computing, HPDC-14' (2005), IEEE Computer Society 243-252
32. Ma J., and Nickerson J.V. Hands-on, simulated, and remote laboratories: a comparative literature review. ACM Computer Survey 38 3 (2006) 7
33. McIntosh M., and Austel P. XML signature elent wrapping attacks and countermeasures. SWS'05: Proceedings of the 2005 Workshop on Secure Web Services (2005), ACM Press 20-27
34. Mohammed S.M., and Fiaidhi J.A. Developing secure transcoding intermediary for svg medical images within peer-to-peer ubiquitous environment. CNSR'05: Proceedings of the 3rd Annual Communication Networks and Services Research Conference (CNSR05)' (2005), IEEE Computer Society 151-156
35. Nair G.G., Gopalakrishnan A., Mauw S., and Moll E. XML security in the next generation optical disc context. Secure Data Management vol. 3674 (2005), Springer, Berlin/Heidelberg 217-233
36. Oliveira E., Lopes D., and Abdelouahab Z. Security on mass with XML security specifications. 17th International Conference on Database and Expert Systems Applications, DEXA'06' (2006), IEEE Computer Society 5-9
37. Park N., Moon K., and Sohn S. Certificate validation service using XKMS for computational grid. XMLSEC'03: Proceedings of the 2003 ACM Workshop on XML Security (2003), ACM Press 112-120
38. Park N., Moon K., and Sohn S. A study on XKMS-based key management system for secure global XML web services. The 6th International Conference on Advanced Communication Technology vol. 1 (2004), IEEE Computer Society 492-495
39. Park N., Moon K., Sohn S., and Park C. Certificate validation scheme of open grid service usage XKMS. Grid and Cooperative Computing vol. 3032 (2004), Springer, Berlin/Heidelberg 849-858
40. Park N., Moon K., Jang J., and Sohn S. Development of XKMS-based service component for using PKI in XML web services environment. Computational Science and Its Applications - ICCSA 2004 vol. 3043 (2004), Springer, Berlin/Heidelberg 784-791
41. Park N., Moon K., Jang J., and Sohn S. Middleware framework for secure grid application in mobile web services environment. Grid and Cooperative Computing - GCC 2004 Workshops vol. 3252 (2004), Springer, Berlin/Heidelberg 406-413
42. Park N., Moon K., Jang J., and Sohn S. A XKMS-based security framework for mobile grid into the XML web services. Computational Science - ICCS 2004' vol. 3038 (2004), Springer, Berlin/Heidelberg 124-132
43. Park N., Kim H., Chung K., Kim S., and Won D. XKMS-based key management for open lbs in web services environment. Advances in Web Intelligence vol. 3528 (2005), Springer, Berlin/Heidelberg 367-373
44. Park N., Moon K., Jang J., Sohn S., and Won D. Implementation of streamlining PKI system for web services. Computational Science and Its Applications - ICCSA 2005 vol. 3480 (2005), Springer, Berlin/Heidelberg 609-618
45. Park N., Moon K., Kim H., Chung K., and Sohn S. An efficient software-based security acceleration methods for open lbs services. Geoscience and Remote Sensing Symposium. IGARSS'05 (2005), IEEE Computer Society p. 4
46. Park N., Kim H., Chung K., Sohn S., and Won D. XML-signcryption based lbs security protocol acceleration methods in mobile distributed computing. Computational Science and Its Applications - ICCSA 2006' vol. 3984 (2006), Springer, Berlin/Heidelberg 251-259
47. Polivy D.J., and Tamassia R. Authenticating distributed data using web services and XML signatures. XMLSEC'02: Proceedings of the 2002 ACM Workshop on XML security (2002), ACM Press 80-89
48. Project, P.I.A.L., 2007. 'Wireless internet access'. .
49. Schadow D. Experience XML security. Communications and Multimedia security vol. 3677 (2005), Springer, Berlin 321-329
50. Shirasuna S., Slominski A., Fang L., and Gannon D. Performance comparison of security mechanisms for grid services. Fifth IEEE/ACM International Workshop on Grid Computing (2004), IEEE Computer Society 360-364
51. Sun L., and Li Y. XML undeniable signatures. International Conference on Computational Intelligence for Modelling, Control and Automation 2005 and International Conference on Intelligent Agents, Web Technologies and Internet Commerce vol. 1 (2005), IEEE Computer Society 981-985
52. Takase T., Uramoto N., and Baba K. XML digital signature system independent of existing applications. Symposium on Applications and the Internet (SAINT) Workshops (2002), IEEE Computer Society 150-157
53. Wei, L., Chiu, K., Slominski, A., Gannon, D., 2005. A streaming validation model for soap digital signature. In: Proceedings of the 14th IEEE International Symposium on High Performance Distributed Computing, pp. 243-252.
54. Yang Y., Ng W., Lau H.L., and Cheng J. An efficient approach to support querying secure out sourced XML information. Advanced Information Systems Engineering vol. 4001 (2006), Springer, Berlin/Heidelberg 157-171
55. Zhang S., Wang B., and Zhou L. Constructing secure web service based on XML. Grid and Cooperative Computing vol. 3032 (2004), Springer, Berlin/Heidelberg 1051-1054