Security architecture for virtual organizations of business web services

Journal of Systems Architecture

Volumn 55, Issue 4, 2009, Pages 224-232

  Kerschbaum, Florian ^a   Robinson, Philip ^b  

^a SAP RESEARCH   (Germany)

^b UNIVERSITY OF ULSTER   (United Kingdom)

Author keywords

Access control derivation; Virtual organization; Virtual organization management security; Web service security

Indexed keywords

COMPUTATION THEORY; SECURITY SYSTEMS; WEB SERVICES;

ACCESS CONTROL POLICIES; AGGREGATE RESOURCES; BUSINESS APPLICATIONS; BUSINESS PROCESS; BUSINESS-USERS; DIFFERENT DOMAINS; NOVEL ARCHITECTURES; SCIENTIFIC RESEARCHES; SECURITY ARCHITECTURES; SERVICE INTERACTIONS; TECHNOLOGICAL FRAMEWORKS; VIRTUAL ORGANIZATION; VIRTUAL ORGANIZATION MANAGEMENT SECURITY; WEB SERVICE SECURITY;

ACCESS CONTROL;

EID: 63649096038     PISSN: 13837621     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.sysarc.2008.10.001     Document Type: Article

References (24)

1. R. Alfieri, R. Cecchini, V. Ciaschini, L. dellAgnello, A. Frohner, A. Gianoli, K. Lorentey, F. Spataro, VOMS: an authorization system for virtual organizations, in: Proceedings of the 1st European Across Grids Conference, 2003.
2. A. Barros, M. Dumas, P. Oaks, A criticial overview of the web services choreography description language, BPTrends, 2005.
3. J. Biskup, B. Carminati, E. Ferrari, F. Müller, S. Wortmann, Towards secure execution orders for CompositeWeb services, in: Proceedings of International Conference on Web Services, 2007.
4. S. Cantor, J. Kemp, R. Philpott, E. Maler, Security Assertion Markup Language (SAML) 2.0 Specification, OASIS. Available from: , 2005.
5. R. Deitos, F. Kerschbaum, P. Robinson, J. Haller, A comprehensive security architecture for dynamic, web service based virtual organizations for businesses, in: Proceedings of the ACM Secure Web Services Workshop, 2006.
6. Y. Demchenko, L. Commans, C. de Laat, M. Steenbakkers, V. Ciashini, V. Venturi, VO-based dynamic security associations in collaborative grid environment, in: Proceedings of Workshop on Collaboration and Security of the International Symposium on Collaborative Technologies and Systems, 2006.
7. I. Foster, C. Kesselman, S. Tuecke, The anatomy of the grid: enabling scalable virtual organizations, Int. J. High Perform. Computing, 2001.
8. Harrison M., Ruzzo W., and Ullman J. Protection in operating systems. Commun. ACM 19 8 (1976)
9. R. Housley, W. Polk, W. Ford, D. Solo, Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile. IETF RFC 3280. Available from: , 2002.
10. W. Johnston, S. Mudumbai M. Thompson, Authorization and attribute certificates for widely distributed access control. in: Proceedings 7th IEEE International Workshop on Enabling Technologies, 1998.
11. Juric M., Rozman I., Brumen B., Colnaric M., and Hericko M. Comparison of performance of web services, WS-Security, RMI, and RMI-SSL. J. Syst. Software 79 5 (2006)
12. M. Kang, J. Park, J. Froscher, Access control mechanisms for inter-organizational workflow, in: Proceedings of the 6th ACM Symposium on Access Control Models and Technologies, 2001.
13. N. Kavantzas, D. Burdett, G. Ritzinger, T. Fletcher, Y. Lafon, C. Barreto, Web Services Choreography Description Language Version 1.0. W3C. Available from: , 2005.
14. F. Kerschbaum, R. Deitos, P. Robinson, Securing VO management, in: Proceedings of the 4th International Conference on Trust, Privacy & Security in Digital Business, 2007.
15. K. Knorr, Dynamic access control through Petri net workflows, in: Proceedings of the 16th Annual Computer Security Applications Conference, 2000.
16. J. Mendling, M. Strembeck, G. Stermsek, G. Neumann, An approach to extract RBAC models from BPEL4WS processes, in: Proceedings of the 13th IEEE International Workshops on Enabling Technologies, 2004.
17. F. Montagut, R. Molva, Enforcing integrity of execution in distributed workflow management systems, in: Proceedings of IEEE International Conference on Services Computing, 2007.
18. T. Moses, eXtensible Access Control Markup Language 2 (XACML) Version 2.0 Specification, OASIS. Available from: , 2005.
19. L. Pearlman, V. Welch, I. Foster, C. Kesselman, S. Tuecke, A community authorization service for group collaboration, in: Proceedings of the 3rd IEEE International Workshop on Policies for Distributed Systems and Networks, 2002.
20. P. Robinson, F. Kerschbaum, A. Schaad, From business process choreography to authorization policies, in: Proceedings of the 20th IFIP WG 11.3 Working Conference on Data and Applications Security, 2006.
21. P. Samarati, S. De Capitani di Vimercati, Access control: policies, models, and mechanisms, Foundations of Security Analysis and Design, LNCS 2171, 2001.
22. Sandhu R., Coyne E., Feinstein H., and Youman C. Role based access control models. IEEE Computer 29 2 (1996)
23. R. Thomas, R. Sandhu, Task-based authorization controls (TBAC): a family of models for active and enterprise-oriented autorization management, in: Proceedings of the 11th IFIP International Conference on Database Securty, 1998.
24. W. van der Aalst, M. Weske, The P2P approach to interorganizational workflows, in: Proceedings of the 13th International Conference on Advanced Information Systems Engineering, 2001.