MARV - Data level confidentiality protection in BPEL-based web service compositions

2011 Conference on Network and Information Systems Security, SAR-SSI 2011, Proceedings

Volumn , Issue , 2011, Pages

  Majernik, Filip ^a   Jensen, Meiko ^a   Schwenk, Jörg ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

DATA CONFIDENTIALITY; DATA LEVEL; DATA-FORWARDING; REAL-WORLD SCENARIO; SERVICE COMPOSITIONS; ULTIMATE DATA; WEB SERVICE COMPOSITION;

DATA HANDLING; INFORMATION SYSTEMS; NETWORK SECURITY; USER INTERFACES;

WEB SERVICES;

EID: 79960808475     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAR-SSI.2011.5931365     Document Type: Conference Paper

References (29)

1. S. Weerawarana et al., Web Services Platform Architecture: SOAP, WSDL, WS-Policy, WS-Addressing, WS-BPEL, WS-Reliable Messaging, and More. Prentice Hall PTR, 2005.
2. A. Nadalin, C. Kaler, R. Monzillo, and P. Hallam-Baker, "Web Services Security: SOAP Message Security 1.1 (WS-Security 2004)," OASIS Standard, 2006.
3. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, and H. G. (Editors), "Web Services Trust Language (WS-Trust)," OASIS Standard, 2007.
4. C. Kaler and A. Nadalin, "Web Services Security Policy Language (WS-SecurityPolicy) 1.1," 2005.
5. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, and H. Granqvist, "Ws-secureconversation 1.3," OASIS Standard, 2007.
6. D. Jordan et al., "Web Services Business Process Execution Language Version 2.0 (WS-BPEL 2.0)," OASIS Standard, 2007.
7. C. M. MacKenzie, K. Laskey, F. McCabe, P. F. Brown, and R. Metz, "Reference Model for Service Oriented Architecture 1.0," OASIS Committee Specification, 2006.
8. M. Gudgin, M. Hadley, N. Mendelsohn, J.-J. Moreau, and H. F. Nielsen, "SOAP Version 1.2 Part 1: Messaging Framework," W3C Recommendation, 2003.
9. E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana, "Web Services Description Language (WSDL)," W3C Note, 2001.
10. J. Schlimmer (Editor), "Web Services Policy 1.2 - Framework (WS-Policy)," W3C Member Submission, 2006.
11. M. Jensen and N. Gruschka, "Privacy against the business partner: Issues for realizing end-to-end confidentiality in web service compositions," Proceedings of the International Workshop on Business Processes Security, 2009.
12. A. Charfi and M. Mezini, "An aspect-based process container for BPEL," in AOMD '05: Proceedings of the 1st workshop on Aspect oriented middleware development. New York, NY, USA: ACM Press, 2005.
13. A. Charfi, R. Berbner, M. Mezini, and R. Steinmetz, "Management Requirements of Web Service Compositions," in Proceedings of the 2nd Workshop on Emerging Web Services Technology (WEWST), 2007.
14. F. Kerschbaum and P. Robinson, "Security architecture for virtual organizations of business web services," Journal of Systems Architecture - Embedded Systems Design, vol. 55, no. 4, pp. 224-232, 2009.
15. F. Kerschbaum and R. Deitos, "Security against the business partner," in SWS, 2008, pp. 1-10.
16. L. Singaravelu and C. Pu, "Fine-grain, end-to-end security for web service compositions," in IEEE SCC, 2007, pp. 212-219.
17. B. Carminati, E. Ferrari, and P. C. K. Hung, "Web service composition: A security perspective," in WIRI, 2005.
18. G. Frankova, F. Massacci, and M. Seguran, "From early requirements analysis towards secure workflows," in Proceedings of IFIPTM 2007: Joint iTrust and PST Conferences on Privacy, Trust Management and Security, July 30 - August 2, 2007, New Brunswick, Canada, 2007.
19. M. Bartoletti, P. Degano, and G. L. Ferrari, "Security issues in service composition," in FMOODS 2006, Bologna, Italy, 2006.
20. W. M. P. van der Aalst, M. Dumas, and A. H. M. ter Hofstede, "Web Service Composition Languages: Old Wine in New Bottles?" in Proceedings of the 29th Euromicro Conference, 2003, pp. 298-305.
21. W. M. P. van der Aalst et al., "Life After BPEL?" in WS-FM 2005, volume 3670 of Lecture Notes in Computer Science, 2005, pp. 35-50.
22. T. Dierks and E. Rescorla, "The Transport Layer Security (TLS) protocol, version 1.1 (rfc 4346)," IETF Requests for Comments, 2006.
23. D. Eastlake, J. Reagle, T. Imamura, B. Dillaway, and E. Simon, "XML Encryption Syntax and Processing," W3C Recommendation, 2002.
24. M. Bartel, J. Boyer, B. Fox, B. LaMacchia, and E. Simon, "XML-Signature Syntax and Processing," W3C Recommendation, 2002.
25. T. Rogers, M. Hadley, and M. Gudgin, "Web services addressing 1.0 - core," W3C, W3C Recommendation, 2006.
26. N. Gruschka, M. Jensen, and T. Dziuk, "Event-Based Application of WS-SecurityPolicy on SOAP Messages," in Proceedings of the 2007 ACM Workshop on Secure Web Services, 2007.
27. J. Reagle, J. Boyer, and D. E. Eastlake, "Exclusive XML canonicalization version 1.0," W3C Recommendation, 2002.
28. The Apache Software Foundation, "Apache ODE," http://ode.apache.org/.
29. -, "Securing SOAP Messages with Rampart," http://ws.apache.org/ axis2/modules/rampart/1-2/security-module.html.