Using Patterns to Understand and Compare Web Services Security Products and Standards

Fernández, Eduardo B.; Delessy, Nelly A.

doi:10.1109/aict-iciw.2006.202

Cited by 21 publications

(4 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Some other works focus on high-level modeling processes for engineering-secure SOA [30,31], with trust modeling [1], identity management, and access control [32,33]. Many studies focus on secure software design practices for SOA, with special interest in architectural or engineering methodologies as the means to create secure services [34,35]. Authors of this paper also have elaborated some security architecture for service-oriented systems.…”

Section: Security In Service-oriented Architecturementioning

confidence: 99%

Trust‐based security‐level evaluation method for dynamic service‐oriented environments

Kołaczek

Juszczyszyn

Świltek

et al. 2015

Concurrency and Computation

View full text Add to dashboard Cite

SUMMARYA method of decision-making in security-level estimation process of service-based applications in future Internet architecture is proposed. We demonstrate how distributed services can be composed to form an application run within the next-generation network infrastructure and their security level may be assessed. Our approach is illustrated by the experiments carried on exemplary application (virtual laboratory online lab, using future Internet IPv6 QoS architecture), in which our method was evaluated against two types of attacks observed with the use of traffic anomaly detection methods.

show abstract

Section: Security In Service-oriented Architecturementioning

confidence: 99%

Trust‐based security‐level evaluation method for dynamic service‐oriented environments

Kołaczek

Juszczyszyn

Świltek

et al. 2015

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Com o intuito de propor uma melhor implementação desses mecanismos de segurança, optou-se pelo uso da orientação a aspectos (AOPAspect-Oriented Programming) para tratar alguns requisitos como preocupações transversais, ou seja, aquelas que estão espalhadas por toda a aplicação (JENSEN et al, 2007). Sendo assim, a orientação a aspectos proporciona um nível maior de abstração, possibilitando tratar os requisitos de segurança separadamente dos requisitos funcionais.…”

Section: Authorizationunclassified

DSOA e Padrões de Segurança aplicados em Web Services<BR>DSOA and safety standards applied in web services

Prass

2012

Saber Humano

View full text Add to dashboard Cite

Resumo: As organizações enfrentam uma série de problemas para atender às exigências previstas pelas normas e modelos de segurança de software, além do aumento contínuo das exigências relacionadas à segurança em sistemas. Uma série de normas e modelos de segurança estão disponíveis na literatura a fim de conduzirem o desenvolvimento de software seguro. Para resolver esse problema tem-se os padrões que são amplamente utilizados em Engenharia de Software onde eles têm sido bem sucedidas na melhoria da análise e projeto por encapsular a experiência de muitos designers. Padrões de segurança são um desenvolvimento recente, como forma de encapsular o conhecimento acumulado sobre o design de sistemas de segurança. Apresenta-se aqui dois padrões para a Web Services: Authentication and Authorization com utilização de Aspectos. Palavras-chave: padrões; segurança; Web Services; aspectos.Abstract: Organizations face a number of problem to meet the requirements of the standards and models of security software, in increase to continued growth in requirements related to security systems. A series of standards and security models are available in the literature to lead the development of secure software. To resolve this problem has been that then Patterns are widely used in Software Engineering where they have been successfu l in improving analysis and design by encapsulating the experience of many designers. Security patterns are a recent development as a way to encapsulate the accumulated knowledge about secure systems design. We present here two patterns for web services: authentication and authorization aspects of using.

show abstract

“…Web services standards are typically long documents, e.g., the XACML 3.0 Core Specification is 150 pages long, written to be comprehensive but not easy to understand, and using a combination of XML, UML, and natural language. By expressing web services security mechanisms and standards as patterns, we can verify if an existing product implementing a given security mechanism supports some specific standard [6]. Inversely, a product vendor can use the standards to guide the development of the product.…”

Section: Introductionmentioning

confidence: 99%

A Survey of Patterns for Web Services Security and Reliability Standards

et al. 2012

View full text Add to dashboard Cite

An important aspect for the acceptance of Service-Oriented Architectures is having convenient ways to help designers build secure applications. Numerous standards define ways to apply security in web services. However, these standards are rather complex and sometimes overlap, which makes them hard to use and may produce inconsistencies. Representing them as patterns makes them easier to understand, to compare to other patterns, to discover inconsistencies, and to use them to build secure web services applications. Security patterns abstract the key aspects of a security mechanism and can thus be applied by non-experts. We survey here our work on security patterns for web services and their standards and we put them in perspective with respect to each other and to more fundamental patterns. We also consider other patterns for web services security. All the patterns described here have been previously published, we only show here one of them in detail as an illustration of our style for writing patterns. Our main purpose here is to enumerate them, show their use, and show how they relate to each other

show abstract

Using Patterns to Understand and Compare Web Services Security Products and Standards

Cited by 21 publications

References 5 publications

Trust‐based security‐level evaluation method for dynamic service‐oriented environments

Trust‐based security‐level evaluation method for dynamic service‐oriented environments

DSOA e Padrões de Segurança aplicados em Web Services<BR>DSOA and safety standards applied in web services

A Survey of Patterns for Web Services Security and Reliability Standards

Contact Info

Product

Resources

About