A Pattern Language for Identity Management

Delessy, Nelly A.; Fernández, Eduardo B.; Larrondo-Petrie, María M.

doi:10.1109/iccgi.2007.5

Cited by 30 publications

(12 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Delessy et al [13] maintain that the wider usages of computer and its applications demands for dynamic trust establishment and identity exchange protocols. To support this idea, authors propose an architectural pattern for identity management systems.…”

Section: Literature Reviewmentioning

confidence: 99%

An Analysis of Application Level Security in Service Oriented Architecture

Nabi¹,

Khan²

2014

IJMECS

View full text Add to dashboard Cite

Abstract-In computing, the software elements like objects and components emphasize on reusability using design tools of abstraction and separation of concerns. Software architecture has appeared as an initial idea to develop huge, complicated and heterogeneous distributed systems successfully. Service Oriented Architecture (SOA) combines services together to make systems having a greater impact on the way software systems are developed. SOA addresses the need of standards-based, loosely connected, and distributed computing which is protocol independent. It is not easy to ensure the secure transaction of data, where the movement of data occurs through loosely connected services. A number of techniques have been proposed in the contemporary literature to guide the SOA implementation in distributed system. These techniques offer certain benefits, but pose some challenges alongside such as the use of meta-data as framework and standard, contract documents, security patterns and security adviser, etc. The objective of this research is to provide a comprehensive analysis of various approaches used to provide application level security to the web services in SOA. These approaches have been compared based on a number of parameters. In addition, we critically evaluate different security methods used in SOA. The study also discusses some future directions in this domain.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

An Analysis of Application Level Security in Service Oriented Architecture

Nabi¹,

Khan²

2014

IJMECS

View full text Add to dashboard Cite

show abstract

“…Delessy et al [10] proposed a pattern language for identity management. These patterns are designed to be used in the software development cycle.…”

Section: Related Workmentioning

confidence: 99%

Automated Security Service Orchestration for the Identity Management in Web Service Based Systems

Warschofsky

Menzel

Meinel

2011

2011 IEEE International Conference on Web Services

View full text Add to dashboard Cite

Abstract-Today, there is a huge amount of security services that can be used to implement different security requirements in Web Service based systems. For example, identity management services are required for authentication and authorization whereas message logging services are necessary to achieve nonrepudiation. However, the deployment and configuration of these security services usually requires expert knowledge about the systems and expert knowledge about security requirements and implementations which a person can only learn by experience. Furthermore, today's Web Service based systems become increasingly complex. Thus, implementing security requirements is a complex and error prone task, even for experts. For this paper, we analysed several service-based implementations for identity management and their differences in the service orchestration. We present an approach to derive the needed security services, their configuration, and their connections to the functional services, based on defined security requirements for a Web Service based system. Therefore, we evaluate the UML use case model of the system and apply service security pattern derived during the analysis of the identity management implementations.

show abstract

“…Delessy and Fernandez defined several security patterns for SOA and Web Service security [4,6] that describe best practices and concepts such as identity provider and identity federation. These patterns provide an informal description, although parts of the pattern's solution are formalised using UML diagrams.…”

Section: Security Patterns For Soa Securitymentioning

confidence: 99%

A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures

Menzel

Warschofsky

Meinel

2010

2010 IEEE International Conference on Web Services

View full text Add to dashboard Cite

Service-oriented Architectures support the provision, discovery, and usage of services in different application contexts. The Web Service specifications provide a technical foundation to implement this paradigm. Moreover, mechanisms are provided to face the new security challenges raised by SOA. To enable the seamless usage of services, security requirements can be expressed as security policies (e.g. WS-Policy and WSSecurityPolicy) that enable the negotiation of these requirements between clients and services.However, the codification of security policies is a difficult and error-prone task due to the complexity of the Web Service specifications. In this paper, we introduce our model-driven approach that facilitates the transformation of architecture models annotated with simple security intention to security policies. This transformation is driven by security configuration patterns that provide expert knowledge on Web Service security. Therefore, we will introduce a formalised pattern structure and a domain-specific language to specify these patterns.

show abstract

A Pattern Language for Identity Management

Cited by 30 publications

References 3 publications

An Analysis of Application Level Security in Service Oriented Architecture

An Analysis of Application Level Security in Service Oriented Architecture

Automated Security Service Orchestration for the Identity Management in Web Service Based Systems

A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures

Contact Info

Product

Resources

About