Security policy composition for composite services

Proceedings - 8th International Conference on Web Engineering, ICWE 2008

Volumn , Issue , 2008, Pages 86-97

  Satoh, Fumiko ^a,b   Tokuda, Takehiro ^b  

^a IBM RESEARCH TOKYO   (Japan)

^b TOKYO INSTITUTE OF TECHNOLOGY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; APPLICATIONS; INFORMATION SERVICES; MECHANISMS; RECURSIVE FUNCTIONS; SECURITY SYSTEMS; STRUCTURE (COMPOSITION);

COMPOSITE SERVICES;

PUBLIC POLICY;

EID: 51749120335     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWE.2008.23     Document Type: Conference Paper

References (16)

1. Web Services Business Process Execution Language Version 2.0, http://docs.oasis-open.org/wsbpel/2.0/OS/wsbpel-v2.0-OS.html.
2. WS-SecurityPolicy 1.2, http://www.oasis-open.org/committees/download.php/ 23821/ws-securitypolicy-1.2-spec-cs.pdf.
3. Web Services Security: SOAP Message Security 1.1, http://www.oasis-open. org/committees/download.php/16790/wss-v1.1-spec-os-SOAPMessageSecurity.pdf.
4. Eclipse BPEL project, http://www.eclipse.org/bpel/.
5. WebSphere Integration Developer, http://www.ibm.com/software/integration/ wid/.
6. eXtensible Access Control Markup Language (XACML) Version 2.0, http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf.
7. Tziviskou, C. and Nitto, E.D., Logic-based Management of Security in Web Services. Proc. of IEEE International Conference on Service Computing, 2007, pp. 228-23 5.
8. Lee, A.J., Boyer, J.P., Olson, L.E. and Gunter, C.A., Defeasible security policy composition for web services. Proc. of the 4th ACM workshop on Formal methods in security, 2006, pp.45-54.
9. Wang, H.J. and Yuan, M., Predicate Logic and its Application in Workflow Security Policy Management. http://math.arizona.edu/~ksimic/ming.doc, 2005.
10. Halpern, J.Y. and Weissman, V., Using first-order logic to reason about policies. Proc. of 16th IEEE Computer Security Foundations Workshop, 2003, pp. 187-201.
11. Glasgow, J., Macewen and G., Panangaden, P., A logic for reasoning about security. ACM Transactions on Co mputer Systems, vol. 10, Issue 3, 1992, pp. 226-264.
12. Li, Y.H., Paik, H., Benatallah, B. and Benbernou, S., Formal Consistency Verification between BPEL Process a nd Privacy Policy. Privacy Security and Trust conference, 2006.
13. He, D.D. and Yang, J., Security Policy Specification an d Integration in Business Collaboration. Proc. of IEEE I nternational Conference on Service Computing, 2007, pp. 20-27.
14. Srivatsa, M., Iyengar, A., Mikalsen, T., Rouvellou I. and Yin, J., An Access Control System for Web Service Compositions. Proc. of IEEE International Conference on Web Services, 2007, pp. 1-8.
15. Charfi, A. and Mezini, M., Using Aspects for Security Engineering of Web Service Compositions. Proc. of IEEE International Conference on Web Services, 2005, pp. 59-66.
16. Bertino, E., Crampton, J. and Paci, F., Access Control a nd Authorization Constraints for WS-BPEL. Proc. of IE EE International Conference on Web Services, 2006, pp. 275-284.