A pattern-driven security advisor for service-oriented architectures

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 13-20

  Schnjakin, Maxim ^a   Menzel, Michael ^a   Meinel, Christoph ^a  

^a UNIVERSITY OF POTSDAM   (Germany)

Author keywords

Security; SOA; Web service; WS security policy

Indexed keywords

ERROR PRONES; SECURITY; SECURITY GOALS; SECURITY MECHANISM; SECURITY MODULES; SECURITY PATTERNS; SECURITY POLICY; SECURITY RISKS; SERVICE-BASED SYSTEMS; SOFTWARE COMPONENT; TECHNICAL LEVELS; WS-SECURITYPOLICY; WS-TRUST;

INFORMATION SERVICES; INTERNET PROTOCOLS; LINGUISTICS; SECURITY SYSTEMS; SERVICE ORIENTED ARCHITECTURE (SOA); SPECIFICATIONS; TELECOMMUNICATION SERVICES; WEB SERVICES;

NETWORK SECURITY;

EID: 74049164526     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655121.1655126     Document Type: Conference Paper

References (24)

1. C. Alexander, S. Ishikawa, M. Silverstein, and M. Jacobsen. A Pattern Lanuage: Towns - Buildings - Construction. Oxford University Press, 1977.
2. S. Bajaj, D. Box, and et. al. Web services policy 1.2 - framework (ws-policy). Public Draft Specification, DOI=http://www.w3.org/Submission/WS- Policy, April 2005.
3. A. K. Bandara, E. C. Lupu, J. Moffett, and A. Russo. A goal-based approach to policy refinement. Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, pages 229-239, 2004.
4. K. Bhargavan, C. F. Andrew, and D. G. G. O'Shea. A pattern-driven security advisor for service-oriented architectures. SWS '05: Proceedings of the 2005 workshop on Secure web services, pages 1-9, 2005.
5. F. Buschmann, R. Meunier, H. Rohnert, P. Sommerlad, and M.Stal. Pattern-Oriented Software Architecture: A System of Pattern. John Wiley and Sons, 1996.
6. C.Eckert. IT-Sicherheit: Konzepte, Verfahren, Protokolle. Oldenbourg Wissenschaftsverlag, 2006.
7. R. Darimont and A. van Lamsweerde. Formal refinement patterns for goal-driven requirements elaboration. Proceedings of the 4th ACM SIGSOFT symposium on Foundations of software engineering, pages 179-190, 1996.
8. G. Denker, L. Kagal, T. W.Finin, M. Paolucci, and K. P.Sycara. Security for daml web ser vices: Annotation and matchmaking. In International Semantic Web Conference, pages 335-350, 2003.
9. G. E., H. R., J. R., and V. J. Design patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, 1994.
10. S. A. et. al. Apache rampart : Ws-security module for axis2. DOI=http://ws.apache.org/axis2/modules/rampart/, 2008.
11. Francisco-Cid and A. Mana. Serenity pattern-based software development life-cycle. Proceedings of the 2008 19th International Conference on Database and Expert Systems Application, pages 305-309, 2007.
12. J. Juerjens. Umlsec: Extending uml for secure systems development, in uml Õ02. 5th International Conference on The Unified Modeling Language (UML2002), pages 412-425, 2002.
13. D. Kienzle and M. Elder. Final technical report: Security patterns for web application development. DOI= http://www.scrypt.net/ celer/ securitypatterns/final%20 report.pdf, 2002.
14. M. MacKenzie, K. Laskey, F. McCabe, P. Brown, and R.Metz. Reference model for service oriented architecture 1.0. OASIS Committee Specification, DOI=http://www.oasisopen.org/committees/tchome.php?wgabbrev=soa-rm, February 2006.
15. R. Miller and M. Shanahan. The event calculus in classical logic alternative axiomatisations. Linkoping Electronic Articles in Computer and Information Science, pages 1-27, 1999.
16. S. Perera, C. Herath, J. Ekanayake, E. Chinthaka, A. Ranabahu, D. Jayasinghe, S. Weerawarana, and G. Daniels. Axis2, middleware for next generation web services. ICWS, IEEE Computer Society, pages 883-840, 2006.
17. K. S., B. Cheng, Campbell, L. A., and W. R. Using security patterns to model and analyze security requirements. Proc. Requirements for High Assurance Systems Workshop, 2003.
18. F. Sanches-Cid and A. Mana. Patterns for automated management of security and dependability solutions. Proceedings of the 18th International Conference on Database and Expert Systems Applications, pages 739-743, 2007.
19. M. Schumacher. Security Engineering with Patterns - Origins, Theoretical Model, and New Applications. Springer, Berlin, 2003.
20. Security and S. team: IBM. An ibm white paper. http://www-3.ibm.com/ security/patterns/intro.pdf.
21. C. Wolter, M. Menzel, and C. Meinel. Modelling security goals in business processes. Proc. GI Modellierung, 2008.
22. J. Yoder and J. Barcalow. Architectural patterns for enabling application security. PLoP, 1997.
23. N. Yoshioka, H. Washizaki, and K. Maruyama. A survey on security patterns. Progress in Informatics, pages 35-47, March 2008.
24. W. Zimmer. Relationships between design patterns. Addison-Wesley, 1995.