Automated security service orchestration for the identity management in Web Service based systems

Proceedings - 2011 IEEE 9th International Conference on Web Services, ICWS 2011

Volumn , Issue , 2011, Pages 596-603

  Warschofsky, Robert ^a   Menzel, Michael ^a   Meinel, Christoph ^a  

^a UNIVERSITY OF POTSDAM   (Germany)

Author keywords

Identity management; Pattern bases security engineering; Security orchestration; Service oriented architectures; Web services

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; INFORMATION SERVICES; SERVICE ORIENTED ARCHITECTURE (SOA); WEBSITES;

IDENTITY MANAGEMENT; PATTERN-BASE SECURITY ENGINEERING; SECURITY ENGINEERING; SECURITY ORCHESTRATION; SECURITY REQUIREMENTS; SECURITY SERVICES; SERVICE ORCHESTRATION; SOA (SERVICEORIENTED ARCHITECTURE); WEB SERVICE-BASED SYSTEM; WEBS SERVICES;

WEB SERVICES;

EID: 80053156542     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2011.41     Document Type: Conference Paper

References (11)

1. E. Gamma, R. Helm, R. Johnson, and J. Vlissides, Design patterns: elements of reusable object-oriented software. Addison-Wesley Longman Publishing Co., Inc., 1995.
2. A. Knöpfel, B. Gröne, and P. Tabeling, Fundamental Modeling Concepts. John Wiley & Sons, Mar. 2006.
3. M. Menzel and C. Meinel, "SecureSOA - Modelling Security Requirements for Service-oriented Architectures," in IEEE International Conference on Services Computing (SCC 2010), Jul. 2010, pp. 146-153.
4. OMG, "The UML 2.0 Superstructure Specification," Object Management Group, Specification Version 2, 2004. [Online]. Available: http://www.omg.org/docs/formal/07-11-04.pdf
5. D. Basin, J. Doser, and T. Lodderstedt, "Model Driven Security: from UML Models to Access Control Infrastructures," ACM Transactions on Software Engineering and Methodology, vol. 15, no. 1, pp. 39-91, January 2006. (Pubitemid 43947939)
6. S. Rieger, "User-Centric Identity Management in Heterogeneous Federations," in ICIW'09: International Conference on Internet and Web Applications and Services. IEEE Computer Society, 2009, pp. 527-532.
7. A. Jøsang, J. Fabre, B. Hay, J. Dalziel, and S. Pope, "Trust Requirements in Identity Management," in ACSW Frontiers 05: Proceedings of the 2005 Australasian workshop on Grid computing and e-research. Australian Computer Society, Inc., 2005, pp. 99-108.
8. M. Menzel, R. Warschofsky, and C. Meinel, "A Pattern-driven Generation of Security Policies for Service-oriented Architectures," in ICWS '10: IEEE International Conference on Web Services. IEEE Computer Society, Jul. 2010, pp. 243-250.
9. G. Meszaros and J. Doble, A pattern language for pattern writing. Boston, MA, USA: Addison-Wesley Longman Publishing Co., Inc., 1997, pp. 529-574.
10. N. A. Delessy, E. B. Fernandez, and M. M. Larrondo-Petrie, "A Pattern Language for Identity Management," in ICCGI '07: Proceedings of the International Multi-Conference on Computing in the Global Information Technology. Washington, DC, USA: IEEE Computer Society, 2007, p. 31.
11. R. M. Needham and M. D. Schroeder, "Using encryption for authentication in large networks of computers," Communications of the ACM, vol. 21, pp. 993-999, December 1978.