F3ildCrypt: End-to-end protection of sensitive information in web services

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5735 LNCS, Issue , 2009, Pages 491-506

  Burnside, Matthew ^a   Keromytis, Angelos D ^a  

^a Department of Earth and Environmental Sciences   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ADDITIONAL COSTS; BACK-END DATABASE; CREDIT CARDS; DATA CONFIDENTIALITY; DATA THEFTS; END-TO-END PROTECTION; ENTERPRISE NETWORKS; ONLINE USERS; PROCESSING RATES; PUBLIC KEYS; SECURITY RISKS; SENSITIVE DATAS; SENSITIVE INFORMATIONS; THIRD PARTIES; WEB CLIENTS; WEB SERVERS;

INFORMATION SERVICES; LIGHT AMPLIFIERS; PIPELINES; QUALITY OF SERVICE; SERVERS; SERVICE ORIENTED ARCHITECTURE (SOA); WEB SERVICES;

SECURITY OF DATA;

EID: 70350405667     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-04474-8_38     Document Type: Conference Paper

References (28)

1. Lemos, R.: TJX theft tops 45.6 million card numbers (March 2008), http://www.securityfocus.com/news/11455
2. Card data stolen from grocery chain (March 2008), http://www. securityfocus.com/brief/704
3. Institute, T.P.: 2007 Annual Study: Cost of a Data Breach(November 2007), http://www.ponemon.org/press/PR-Ponemon-2007-C0B-071126-F.pdf
4. Saltzer, J.H., Reed, D.P., Clark, D.D.: End-to-end arguments in system design. ACM Transactions on Computer Systems (TOCS) 2(4), 277-288 (1984)
5. Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000. Official Journal of the European Communities (December 2001)
6. Cai, L., Yang, X.: A reference model and system architecture for database firewall. In: Proceedings of IEEE SMC 2005, pp. 504-509 (2005)
7. Bai, K., Wang, H., Liu, P.: Towards Database Firewall: Mining the Damage Spreading Patterns. In: Proceedings of ACSAC 2006, pp. 178-192 (2006)
8. Garrett, J.J.: Ajax: A New Approach to Web Applications (February 2005), http://www.adaptivepath.com/ideas/essays/archives/000385.php
9. Saltzer, J.H., Schroeder, M.D.: The protection of information in computer systems. Proceedings of the IEEE 63(9), 1278-1308 (1975)
10. Ateniese, G., Fu, K., Green, M., Hohenberger, S.: Improved proxy re-encryption schemes with applications to secure distributed storage. In: Proceedings of the 12th Annual Network and Distributed Systems Security Symposium, NDSS 2005 (2005)
11. Blaze, M., Bleumer, G., Strauss, M.: Divertible protocols and atomic proxy cryptography. In: Nyberg, K. (ed.) EUROCRYPT 1998. LNCS, vol. 1403, pp. 127-144. Springer, Heidelberg (1998)
12. JHU-MIT Proxy Re-cryptography Library (March 2008), http://spar.isi.jhu. edu/~mgreen/prl/
13. Maruyama, H., Imamura, T.: Element-Wise XML Encryption (April 2000), http://lists.w3.org/Archives/Public/xml-encryption/2000Apr/att-0005/01-xmlenc
14. Cisco ACE XML Gateway (March 2008), http://www.cisco.com/en/US/products/ ps7314/index.html
15. WebSphere DataPower XML Security Gateway XS40 (March 2008), http://www-306.ibm.com/software/integration/datapower/xs40/
16. Damiani, E., di Vimercati, S.D.C., Paraboschi, S., Samarati, P.: A fine-grained access control system for XML documents. ACM Transactions on Information and System Security (TISSEC) 5(2), 169-202 (2002)
17. Luo, B., Lee, D., Lee, W.C., Liu, P.: QFilter: fine-grained run-time XML access control via NFA-based query rewriting. In: The Thirteenth ACM International Conference on Information and Knowledge Management, pp. 543-552 (2004)
18. Fundulaki, I., Marx, M.: Specifying access control policies for XML documents with XPath. In: Proceedings of the ninth ACM symposium on Access control models and technologies, pp. 61-69 (2004)
19. OASIS extensible Access Control Markup Language (XACML) (2005), http://www.oasis-open.org/committees/security/
20. Stavrou, A., Locasto, M., Keromytis, A.: W3bcrypt: Encryption as a stylesheet. In: Zhou, J., Yung, M., Bao, F. (eds.) ACNS 2006. LNCS, vol. 3989, pp. 349-364. Springer, Heidelberg (2006)
21. Li, F., Luo, B., Liu, P., Lee, D., Chu, C.H.: Automaton segmentation: A new approach to preserve privacy in XML information brokering. In: Proceedings of the 14th ACM conference on Computer and Communications Security (CCS) (2007)
22. Mahmoud, Q.H.: Securing Web Services and the Java WSDP 1.5 XWS-Security Framework (March 2005), http://java.sun.com/developer/technicalArticles/ WebServices/security/
23. Singaravelu, L., Pu, C.: Fine-grain, end-to-end security for web service compositions. In: IEEE International Conference on Services Computing (SCC 2007), pp. 212-219 (2007)
24. Chafle, G., Chandra, S., Mann, V., Nanda, M.G.: Orchestrating composite web services under data flow constraints. In: Proceedings of the IEEE International Conference on Web Services, pp. 211-218 (2005)
25. Boneh, D., Franklin, M.: Identity-based encryption from the Weil Pairing. SIAM Journal of Computing 32(2), 586-615 (2003)
26. Keromytis, A.D., Wright, J.L., de Raadt, T.: The Design of the OpenBSD Cryptographic Framework. In: Proceedings of the USENIX Annual Technical Conference, June 2003, pp. 181-196 (2003)
27. Cranor, L., Langheinrich, M., Marchiori, M., Presler-Marshall, M., Reagle, J.: The Platform for Privacy Preferences 1.0 (P3P1.0) Specifcation (April 2002)
28. Jackson, C., Boneh, D., Mitchell, J.: Transaction generators: Root kits for the web. In: Proceedings of the 2nd USENIX Workshop on Hot Topics in Security (2007)