Privacy against the business partner: Issues for realizing end-to-end confidentiality in web service compositions

Proceedings - International Workshop on Database and Expert Systems Applications, DEXA

Volumn , Issue , 2009, Pages 117-121

  Jensen, Meiko ^a   Gruschka, Nils ^b  

^a RUHR UNIVERSITY BOCHUM   (Germany)

^b NEC LABORATORIES EUROPE   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PARTNERS; BUSINESS PROCESS; PROCESS LEVELS; SECURITY REQUIREMENTS; SERVICE COMPOSITIONS; SERVICE ORIENTED; SUITABLE SOLUTIONS; WEB SERVICE COMPOSITION; WEB SERVICES SECURITY; WS-BPEL;

EXPERT SYSTEMS; NETWORK SECURITY; PROBLEM SOLVING; QUALITY OF SERVICE; WEB SERVICES;

DATABASE SYSTEMS;

EID: 73649147773     PISSN: 15294188     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DEXA.2009.38     Document Type: Conference Paper

References (19)

1. M. Gudgin, M. Hadley, N. Mendelsohn, J.-J. Moreau, and H. F. Nielsen, "SOAP Version 1.2 Part 1: Messaging Framework," W3C Recommendation, 2003.
2. E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana, "Web Services Description Language (WSDL)," W3C Note, 2001.
3. J. S. (Editor), "Web Services Policy 1.2 - Framework (WSPolicy)," W3C Member Submission, 2006.
4. A. Nadalin, C. Kaler, R. Monzillo, and P. Hallam-Baker, "Web Services Security: SOAP Message Security 1.1 (WS-Security 2004)," 2006.
5. D. Jordan and J. Evdemon, "Web services business process execution language version 2.0," OASIS Standard, 2007.
6. C. Kaler and A. Nadalin, "Web Services Security Policy Language (WS-SecurityPolicy) 1.1," 2005.
7. E. van der Vlist, XML Schema. O'Reilly, 2002.
8. M. Gudgin, M. Hadley, and T. Rogers, "Web Services Addressing 1.0 - SOAP Binding," W3C Recommendation, May 2006.
9. A. Charfi, R. Berbner, M. Mezini, and R. Steinmetz, "Management requirements of web service compositions," in Proceedings of the 2nd Workshop on Emerging Web Services Technology, 2007, pp. 87-100.
10. K. Bhargavan, C. Fournet, and A. D. Gordon, "Verifying policy-based security for Web Services," in CCS '04: Proceedings of the 11th ACM conference on Computer and communications security. New York, NY, USA: ACM Press, 2004, pp. 268-277.
11. N. Gruschka and R. Herkenhöner, "WS-SecurityPolicy Decision and Enforcement for Web Service Firewalls," in Proceedings of the IEEE/IST Workshop on Monitoring, Attack Detection and Mitigation, 2006.
12. T. Imamura, A. Clark, and H. Maruyama, "A stream-based implementation of XML Encryption," in XMLSEC '02: Proceedings of the 2002 ACM workshop on XML security. New York, NY, USA: ACM Press, 2002, pp. 11-17.
13. N. Gruschka, N. Luttenberger, and R. Herkenhöner, "Eventbased SOAP Message Validation for WS-SecurityPolicyenriched Web Services," in Proceedings of the 2006 International Conference on Semantic Web & Web Services, 2006.
14. N. Gruschka, M. Jensen, and T. Dziuk, "Event-Based Application of WS-SecurityPolicy on SOAP Messages," in Proceedings of the 2007 ACM Workshop on Secure Web Services, 2007.
15. A. Charfi and M. Mezini, "Middleware services for web service compositions," in WWW '05: Special interest tracks and posters of the 14th international conference on World Wide Web. New York, NY, USA: ACM, 2005, pp. 1132-1133.
16. -, "Using Aspects for Security Engineering of Web Service Compositions," in ICWS '05: Proceedings of the IEEE International Conference on Web Services. Washington, DC, USA: IEEE Computer Society, 2005, pp. 59-66.
17. G. Frankova, F. Massacci, and M. Seguran, "From early requirements analysis towards secure workflows," in IFIP International Federation for Information Processing, Volume 238, Trust Management, 2007.
18. M. Jensen and S. Feja, "A security modeling approach for web-service-based business processes," in Proceedings of the 7th IEEE Workshop on Model-Based Development for Computer-Based Systems (MBD), 2009.
19. -, "Modellierung von Sicherheitsaspekten in orchestrierten integrierten Anwendungssystemen (german)," Model-Driven Integration Engineering, Leipziger Beiträge zur Informatik, vol. XI, 2008.