EnhancingSecurity modeling for web services using delegation and pass-on

Proceedings of the IEEE International Conference on Web Services, ICWS 2008

Volumn , Issue , 2008, Pages 545-552

  Wei, She ^a   Yen, I Ling ^a   Thuraisingham, Bhavani ^a  

^a UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

WEB SERVICES; WORLD WIDE WEB;

ACCESS CONTROL POLICIES; CERTIFICATE CHAINS; INFORMATION FLOWS; SECURITY MODELS; SECURITY STANDARDS; SENSITIVE INFORMATIONS; WEB SERVICE SECURITIES;

ACCESS CONTROL;

EID: 57749208891     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2008.23     Document Type: Conference Paper

References (15)

1. [AUR01] T. Aura. "Distributed access-rights management with delegation certificates". Lecture Notes In Computer Science, pp. 211-235. 2001.
2. [BER06] E. Bertino, A. C. Squicciarini, I. Paloscia, and L Martino. "Ws-AC: a fine grained access control system for web services". World Wide Web. Vol. 9. No. 2. pp. 143-171. Jun., 2006.
3. [BHA05] R. Bhatti, E. Bertino, and A. Ghafoor. "A trust-based context-aware access control model for web-services". Distributed and Parallel Databases. Vol. 18. No. 1. pp. 83-105. 2005.
4. [GAS90] M. Gasser. and E. McDermott. "An architecture for practical delegation in a distributed system". The Proc. of IEEE Symposium on Security and Privacy, p. 20, 1990.
5. [IBM06] IBM, Microsoft, RSA, and Verisign, http://specs.xmlsoap.org.
6. [KOR00] Y. Kortesniemi, and T. Hasu. "A revocation, validation and authentication protocol for SPKI based delegation systems". Network and Distributed Systems Security Symposium. 2000.
7. [OAS06] OASIS, http://docs.oasis-open.org.
8. [PAR04] J. Park, and R. Sandhu. "The UCONABC usage control model". ACM Trans, on Info, and System Security. Vol. 7. No. 1. pp. 128-174. 2004.
9. [RAO04] Y. Rao. B. Feng, J. Han, and Z. Li. "SX-RSRPM: a security integrated model for Web services". The Proc. of 2004 International Conference on Machine Learning and Cybernetics. Vol. 5. pp. 26-29. 2004.
10. [SKO03] H. Skogsrud, B. Benatallah, and F. Casati. "Model-Driven Trust Negotiation for Web Services," IEEE Internet Computing, pp. 45-51, 2003.
11. [WAN05] J. Wang, D. D. Vecchio, and M. Humphrey. "Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services". The Proc. of IEEE International Conference on Web Services, pp. 67-74. 2005.
12. [WEL04] V. Welch. I. Foster, C. Kesselman, O. Mulmo, L. Pearlman, S. Tuecke, J. Gawor, S. Meder, and F. Siebenlist. "X.509 proxy certificates for dynamic delegation". 3rd Annual PKI R&D Workshop. 2004.
13. [YIA96] N. Yialelis, and M. Sloman. "A security framework supporting domain-based access control in distributed systems". Proc. of Symposium on Network and Distributed System Security, p. 26. 1996.
14. [YIN04] Gang Yin, Huai-min Wang, Dian-xi Shi, Yan Jia, and Meng Teng. "A rale-based framework for role-based constrained delegation". Proc. of the 3rd international conference on information security, pp. 186-191. 2004.
15. [ZHA03] Longhua Zhang, Gail-Joon Ahn, and Bei-Tseng Chu. "A rale-based framework for role-based delegation and revocation". ACM Transactions on Information and System Security. Vol. 6. Issue 3. pp. 404-441. 2003.