Survey on Signatured Xml Encryption for Multi-Tier Web Services Security

Menaka, R.; Banu, R. S. D. Wahida; Ashadevi, B.

doi:10.17485/ijst/2016/v9i16/87966

Cited by 1 publication

(2 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [41], the authors evaluated authentication, authorization, integration, confidentiality, and non-repudiation when using XML encryption and XML Signature in webservices in an e-business scenario and proved that all those parameters could be guaranteed when combining both XML encryption and XML signature. Meanwhile, in [33], the authors examined how XML Web security could provide privacy, certification, and integrity. They applied XML encryption and XML signature for data and messages in transaction and in storage.…”

Section: B Related Work On Xml Security Technologiesmentioning

confidence: 99%

“…SOAP messages are based on Extensible Mark-up Language (XML) data format. XML, on the other hand, is used in many areas to store, retrieve, and provide data and information in an organized format [31] and it is considered one of the most extensively used data exchange languages across the internet [32] because of its immense compatibility in transit [33]. There are many advantages in using XML data representation, such as: the notions of elements, it is extensible, it allows the separation of display and content and it can present complex structure in an easy way [32].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Access Control Model for Modern Virtual e-Government Services: Saudi Arabian Case Study

Albrahim¹,

Alsalamah²,

Alsalamah³

et al. 2018

ijacsa

View full text Add to dashboard Cite

Government services require intensive information exchange and interconnection among governmental agencies to provide specialized online services and allow informed decision-making. This could compromise the integrity, confidentiality, and/or availability of the information being exchanged. Government agencies are accountable and liable for the protection of information they possess and use on a least privilege security principle basis even after dissemination. However, traditional access control models are short of achieving this as they do not allow dynamic access to unknown users to the system, they do not provide security controls at a fine-grained level, and they do not provide persistent control over this information. This paper proposes a novel secure access control model for cross-governmental agencies. The secure model deploys a Role-centric Mandatory Access Control MAC (R-MAC) model, suggests a classification scheme for e-Government information, and enforces its application using XML security technologies. By using the proposed model, privacy could be preserved by having dynamic, persistent, and fine-grained control over their shared information.

show abstract

Section: B Related Work On Xml Security Technologiesmentioning

confidence: 99%