SOABSE: An approach to realizing business-oriented security requirements with web service security policies

IEEE International Conference on Service-Oriented Computing and Applications, SOCA' 09

Volumn , Issue , 2009, Pages 307-316

  Phan, Tan ^a   Han, Jun ^a   Mueller, Ingo ^a   Kapuruge, Malinda ^a   Versteeg, Steve ^b  

^a SWINBURNE UNIVERSITY OF TECHNOLOGY   (Australia)

^b CA Labs   (Australia)

Author keywords

Security attributes; Security models; WS Security

Indexed keywords

BUSINESS APPLICATIONS; CRITICAL ISSUES; CURRENT PRACTICES; PROTOTYPE TOOLS; REALIZATION MODEL; SECURITY ATTRIBUTES; SECURITY MECHANISM; SECURITY MODEL; SECURITY OBJECTIVES; SECURITY POLICY; SECURITY REQUIREMENTS; SYSTEM LEVELS; WEB SERVICE SECURITY; WEB SERVICES SECURITY;

MODELS; SECURITY SYSTEMS; WEB SERVICES;

SECURITY OF DATA;

EID: 77950210156     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SOCA.2009.5410258     Document Type: Conference Paper

References (18)

1. M. Papazoglou, Web services: Principles and technology: Addison-Wesley, 2008.
2. T. Lodderstedt, D. Basin, and J. Doser, "SecureUML: A UML-Based Modeling Language for Model-Driven Security " in «UML» 2002 - The Unified Modeling Language, pp. 426-441, Berlin/Heidelberg: Springer, 2002.
3. Commonwealth of Australia, "Privacy Act 1988," available at http://www.austlii.edu.au/au/legis/cth/consol-act/pa1988108
4. ISO/IEC-15408, "Banking - Security and other financial services - Framework for security in financial systems" ISO, 2002.
5. ISO/IEC-15408, "Common Criteria for Information Technology Security Evaluation," http://csrc.nist.gov/cc/, ISO, 1999
6. C. Gutierez, E. Fernandez-Medina, and M. Piattini, "Web Services-based Security Requirement Elicitation," IEICE - Transactions on Information and Systems, vol.E90-D, no.9, pp. 1374-1387 2007.
7. R. Akkiraju, J. Farrell, J. Miller et al. "Web Service Semantics - WSDL-S," W3C standard submission, 2007; http://www.w3.org/Submission/WSDL- S/.
8. J. D. Meier, A. Mackman, M. Dunner et al., "Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication," Microsoft Patterns and Practices, MSDN library, Microsoft Corporation, revised version 2006.
9. J. D. Meier, A. Mackman, M. Dunner et al., Improving Web Application Security: Threats and Countermeasures: Microsoft Press 2003.
10. A. Buecker, P. Ashley, M. Borrett et al., Understanding SOA Security Design and Implementation: IBM Redbook Publication, 2007.
11. M. McIntosh, M. Gudgin, K. S. Morrison et al., "Basic Security Profile Version 1.0," WS-I Standard, 2007.
12. J. Jürjens, "UMLsec: Extending UML for secure systems development," in «UML» 2002 - The Unified Modeling Language, pp. 412-425, Berlin / Heidelberg: Springer, 2002.
13. Y. Nakamura, M. Tatsubori, T. Imanura et al., "Model-Driven Security Based on a Web Services Security Architecture." International Conference on Services Computing 2005 (SCC'05). Florida, USA (2005)
14. C. Wolter, M. Menzel, A. Schaad et al., "Model-driven business process security requirement specification," Journal on System Architect: (Special Issue on Secure SOA) October 26 2008
15. M. Hafner, and R. Breu, Security Engineering for Service-Oriented Architectures: Springer-Verlag New York Inc, 2008.
16. K. Bhargavan, C. Fournet, A. D. Gordon et al., "TulaFale: A security tool for web services," in Formal Methods for Components and Objects, pp. 197-222, Berlin/Heidelberg: Springer, 2004.
17. T. Phan, J. Han, J.-G. Schneider et al., "Quality-Driven Business Policy Specification and Refinement for Service - Oriented Systems." pp. 5-21. International Conference on Service Oriented Computing 2008 (ICSOC '08). Springer, Sydney, Australia (December 2008)
18. T. Phan, J. Han, J.-G. Schneider et al., "Policy-based service registration and discovery," International Conference on Cooperative Information Systems 2007 (CoopIS '07). Villamoura, Algarve, Portugal (2007). LNCS 4804. pp. 417-427.