Building dependable and secure web Services

Journal of Software

Volumn 2, Issue 1, 2007, Pages 14-26

  Moser, L E ^a   Melliar Smith, P M ^a   Zhao, W ^b  

^a University of California   (United States)

^b Cleveland State University   (United States)

Author keywords

Availability; Business activity; Consistency; Dependability; Fault tolerance; Intrusion tolerance; Reliability; Security; Trust; Web Service

Indexed keywords

BUSINESS ACTIVITIES; CONSISTENCY; DEPENDABILITY; INTRUSION TOLERANCE; SECURITY; TRUST;

AVAILABILITY; FAULT TOLERANCE; INDUSTRY; RELIABILITY; SPECIFICATIONS; TECHNOLOGY; WEBSITES;

WEB SERVICES;

EID: 55249122525     PISSN: 1796217X     EISSN: None     Source Type: Journal    
DOI: 10.4304/jsw.2.1.14-26     Document Type: Article

References (45)

1. N. Aghdaie and Y. Tamir, "Implementation and evaluation of transparent fault-tolerant Web Service with kernel-level support, " Proceedings of the IEEE International Conference on Computer Communications and Networks, Miami, FL, October 2002, 63-68.
2. S. Anderson, et al., "Web Services trust language, " version 1.1, February 2005, http://www-128.ibm.com/ developerworks/library/specification/ws-trust/.
3. A. Avizienis, J. C. Laprie, B. Randell and C. Landwehr, "Basic concepts and taxonomy of dependable and secure computing, " IEEE Transactions on Dependable and Secure Computing1, 1, January-March 2004, 11-33.
4. O. Babaoglu, A. Bartoli, V. Maverick, S. Patarin and H. Wu, "A framework for prototyping J2EE replication algorithms, " Proceedings of the International Symposium on Distributed Objects and Applications, Agia Napa, Cyprus, October 2004, 1413-1426.
5. S. Bajaj, et al., "Web Services federation language, " version 1.0, July 2003, http://msdn.microsoft.com/library/ default.asp?url=/library/en-us/dnglobspec/html/ws-federation. asp.
6. A. Barbir, M. Gudgin, M. McIntosh and K. S. Morrison, "SAML token profile, " version 1.0, January 2006, http://www.ws-i.org/Profiles/SAMLTokenProfile-1.0.html.
7. A. Bartoli, M. Prica and E. A. di Muro, "A replication framework for program-to-program interaction across unreliable networks and its implementation in a servlet container, " Concurrency and Computation: Practice and Experience18, 7, June 2006, 701-724.
8. R. Bilorusets, et al., "Web Services reliable messaging, " February 2005, http://www-128.ibm.com/developerworks/ webservices/library/ws-rm/.
9. D. Booth, H. Hass, F. McCabe, E. Newcomer, M. Champion, C. Ferris and D. Orchard, "Web Services architecture, " February 2004, http://www.w3.org/TR/ws-arch.
10. L. F. Cabrera, et al., "Web Services transaction, " August 2002, http://www.ibm.com/developerworks/library/wstranspec/.
11. L. F. Cabrera, et al., "Web Services business activity framework, " January 2004, http://www.ibm.com/ developerworks/library/ws-busact/.
12. L. F. Cabrera, et al., "Web Services coordination, " September 2003, http://www.ibm.com/developerworks/library/wscoor/.
13. C. Cachin and J. Poritz, "Secure intrusion-tolerant replication on the Internet, " Proceedings of the 2002 International Conference on Dependable Systems and Networks, Washington, D.C., June 2002, 167-176.
14. M. Castro and B. Liskov, "Practical Byzantine fault tolerance and proactive recovery, " ACM Transactions on Computer Systems20, 4, 2002, 398-461.
15. L. Clement, et al., "UDDI replication specification, " version 2.03, July 2002, http://uddi.org/pubs/Replication-V2.03-Published-20020719.pdf.
16. X. Defago, A. Schiper and P. Urban, "Total order broadcast and multicast algorithms: Taxonomy and survey, " Computing Surveys36, 4, December 2004, 372-421.
17. Y. Deswarte, N. Abghour, V. Nicomette and D. Powell, "An intrusion-tolerant authorization scheme for Internet applications, " Proceedings of the 2002 International Conference on Dependable Systems and Networks, Washington, D.C., June 2002, C-1.1-C-1.6.
18. Y. Deswarte, L. Blain and J. Fabre, "Intrusion tolerance in distributed computing systems, " Proceedings of the IEEE Symposium on Research in Security and Privacy, Oakland, CA, 1991, 110-121.
19. P. Griffin, C. Kaler, P. Hallam-Baker and R. Monzillo, "Web services security Kerberos token profile 1.1, " OASIS specification, February 2006.
20. P. Hallam-Baker, C. Kaler, R. Monzillo and A. Nadalin, "Web services security X.509 certificate token profile, " OASIS specification 200401, March 2004.
21. F. Hanik, "In-memory session replication with Tomcat 4, " April 2002, http://www.TheServerSide.com.
22. D. Ingham, S. Shrivastava and F. Panzieri, "Constructing dependable Web Services, " IEEE Internet Computing4, 1, January/February 2000, 25-33.
23. G. Janakiraman, J, Santos, D. Subhraveti and Y. Turner, "Cruz: Application-transparent distributed checkpointrestart on standard operating systems, " Proceedings of the IEEE International Conference on Dependable Systems and Networks, Yokohama, Japan, June 2005, 260-269.
24. R. Jimenez-Peris, M. Patino-Martinez, G. Alonso and S. Arevalo, "A low-latency non-blocking commit service, " Proceedings of the International Conference on Distributed Computing, Lisbon, Portugal, October 2001, 93-107.
25. D. Eastlake and P. Jones, "US Secure Hash Algorithm 1 (SHA1)", RFC 3174, September 2001, http://www. faqs.org/fcs/rfc3174.html.
26. R. Koch, S. Hortikar, L. E. Moser and P. M. Melliar-Smith, "Transparent TCP connection failover, " Proceedings of the IEEE International Conference on Dependable Systems and Networks, San Francisco, CA, June 2003, 383-392.
27. A. Kupsys, S. Pleisch, A. Schiper and M. Wiesmann, "Towards JMS compliant group communication, " Proceedings of the IEEE International Symposium on Network Computing and Applications, Cambridge, MA, August 2004, 131-140.
28. L. Lamport, R. Shostak and M. Pease, "The Byzantine generals problem, " ACM Transactions on Programming Languages and Systems4, 3, 1982, 382-401.
29. M. G. Merideth, A. Iyengar, T. Mikalsen, S. Tai, I. Rouvellou and P. Narasimhan, "Thema: Byzantine-fault-tolerant middleware for Web service applications, " Proceedings of the 24th IEEE Symposium on Reliable Distributed Systems, Orlando, FL, October 2005, 131-140.
30. A. Nadalin, C. Kaler, P. Hallam-Baker and R. Monzillo, "Web services security: SOAP message security 1.0, " OASIS specification 200401, March 2004.
31. P. Narasimhan, L. E. Moser and P. M. Melliar-Smith, "Strongly consistent replication and recovery of faulttolerant CORBA applications, " Computer Science and Engineering Journal17, 2, March 2002, 103-114.
32. Object Management Group, "Fault Tolerant CORBA, " OMG Technical Committee Document formal/02-06-59, Chapter 23, CORBA/IIOP 3.0, 2000, http://www.omg.org.
33. Object Management Group, "Transaction Service Specification, " v1.2, OMG Technical Committee Document ptc/2000-11-07, 2000, http://www.omg.org.
34. S. Pallickara, G. Fox and S. L. Pallickara, "An analysis of reliable delivery specifications forWeb Services, " Proceedings of the IEEE Conference on Information Technology, Las Vegas, NV, April 2005, 360-365.
35. R. Rivest, "The MD5 message-digest algorithm, " RFC 1321, April 1992, http://www.faqs.org/rfcs/rfc1321.html.
36. T. Rutt, M. Peel, D. Bunting, K. Iwasa and J. Durand, "Web Services reliability, " August 2004, http://oasisopen. org/committees/ tc home.php?wg abbrev=wsrm.
37. C. Sun, Y. Lin and B. Kemme, "Comparison of UDDI registry replication strategies, " Proceedings of the IEEE International Conference on Web Services, San Diego, CA, July 2004, 218-225.
38. A. Vaysburd, "Fault tolerance in three-tier applications: Focusing on the database tier, " Proceedings of the IEEE Symposium on Reliable Distributed Systems, Lausanne, Switzerland, October 1999, 322-327.
39. P. Verissimo, N. Neves and M. Correia, "Intrusion-tolerant architectures: Concepts and design, " Lecture Notes in Computer Science2677, 2003, 90-109.
40. W3C, "XML signature syntax and processing, February 2002, http://www.w3.org/TR/xmldsig-core/.
41. W3C, "XML encryption syntax and processing, " December 2002, http://www.w3.org/TR/xmlenc-core/.
42. W. Zhao, L. E. Moser and P. M. Melliar-Smith, "Design and implementation of a pluggable fault tolerant CORBA infrastructure, " Cluster Computing, Special Issue on Dependable Distributed Systems7, 4, October 2004, 317-330.
43. W. Zhao, L. E. Moser and P. M. Melliar-Smith, "Unification of transactions and replication in three-tier architectures based on CORBA, " IEEE Transactions on Dependable and Secure Computing2, 1, January-March 2005, 20-33.
44. W. Zhao, L. E. Moser and P. M. Melliar-Smith, "A reservation-based coordination protocol for business activities" Proceedings of the IEEE International Conference on Web Services, Orlando, FL, July 2005, 49-56.
45. L. Zhou, F. Schneider and R. van Renesse, "COCA: A secure distributed online certification authority, " ACM Transactions on Computer Systems20, 4, 2002, 329-368.