Trust but verify: Authorization for web services

Proceedings of the 2004 Workshop on Secure Web Service, SWS 2004

Volumn , Issue , 2015, Pages 47-55

  Skalka, Christian ^a   Wang, X Sean ^a  

^a University of Vermont ^*  (United States)

Author keywords

Access control logic; Distributed authorization; Web services

Indexed keywords

ACCESS CONTROL; NETWORK SECURITY; WEBSITES;

ACCESS CONTROL LISTS; ACCESS CONTROL LOGIC; AUTHORIZATION POLICY; DISTRIBUTED APPLICATIONS; DISTRIBUTED AUTHORIZATION; DISTRIBUTED SYSTEMS; TRANSFORMATION RULES; WEB SERVICE TECHNOLOGY;

WEB SERVICES;

EID: 84954104016     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1111348.1111354     Document Type: Conference Paper

References (21)

1. M. Abadi. On SDSI's linked local name spaces. Journal of Computer Security, 6(1-2):3-21, 1998.
2. M. Abadi, M. Burrows, B. Lampson, and G. Plotkin. A calculus for access control in distributed systems. ACM Trans. Prog. Lang. Syst., 15(4):706-734, 1993.
3. A. W. Appel and E. W. Felten. Proof-carrying authentication. In G. Tsudik, editor, Proceedings of the 6th Conference on Computer and Communications Security, Singapore, Nov. 1999. ACM Press.
4. L. Bauer. Access Control for the Web via Proof-carrying Authorization. PhD thesis, Princeton University, 2003.
5. L. Bauer, A. W. Appel, and E. W. Felten. Mechanisms for secure modular programming in java. Technical Report TR-603-99, Princeton University, Computer Science Department, July 1999.
6. K. Bhargavan, C. Fournet, and A. D. Gordon. A semantics for web services authentication. In Proceedings of the 31st ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 198-209. ACM Press, 2004.
7. V. Christophides, R. Hull, G. Karvounarakis, A. Kumar, G. Tong, and M. Xiong. Beyond discrete e-services: Composing session-oriented services in telecommunications. In Proceedings of the Workshop on Technologies for E-Services (TES), Rome, Italy, 2001.
8. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. SPKI certificate theory. RFC 2693, Sept. 1999.
9. C. Fournet and M. Abadi. Hiding names: Private authentication in the pi calculus. In Proceedings of the International Symposium on Software Security, number 2609 in LNCS, pages 317-338. Springer-Verlag, November 2003.
10. A. Gordon, K. Bhargavan, C. Fournet, and R. Pucella. Tulufale: A security tool for web services. In Springer, editor, Formal Methods for Components and Objects, LNCS, 2003.
11. A. D. Gordon and R. Pucella. Validating a web service security abstraction by typing. In Proceedings of the 2002 ACM workshop on XML security, pages 18-29. ACM Press, 2002.
12. J. Howell and D. Kotz. A formal semantics for SPKI. Technical Report 2000-363, Dartmouth College, 2000.
13. R. Hull and J. Su. Tools for design of composite web services. In ACM SIGMOD, pages 958-961, 2004.
14. N. Li, B. N. Grosof, and J. Feigenbaum. Delegation Logic: A logic-based approach to distributed authorization. ACM Transaction on Information and System Security (TISSEC), Feb. 2003. To appear.
15. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
16. R. Rivest and B. Lampson. SDSI - A simple distributed security infrastructure, 1996.
17. E. G. Sirer and K. Wang. An access control language for web services. In Proceedings of the seventh ACM symposium on Access control models and technologies, pages 23-30. ACM Press, 2002.
18. D. S. Wallach. A New Approach to Mobile Code Security. PhD thesis, Princeton University, 1999.
19. D. S. Wallach, A. W. Appel, and E. W. Felten. SAFKASI: a security mechanism for language-based systems. ACM Trans. Softw. Eng. Methodol., 9(4):341-378, 2000.
20. D. S. Wallach and E. W. Felten. Understanding java stack inspection. In Proceedings of 1998 IEEE Symposium on Security and Privacy, Oakland, CA, May 1998.
21. E. Wobber, M. Abadi, M. Burrows, and B. Lampson. Authentication in the Taos operating system. Technical Report 117, DEC Systems Research Center, 130 Lytton Avenue, Palo Alto, Ca 94301, December 1993.