NDLI: Toward an abstract language on top of XACML for web services security

Content Provider	IEEE Xplore Digital Library
Author	Mourad, A. Otrok, H. Yahyaoui, H. Baajour, L.
Copyright Year	2011
Description	Author affiliation: Department of Computer Engineering, Khalifa University of Science, Technology & Research, Abu Dhabi, UAE (Otrok, H.) \|\| Department of Computer Science, Kuwait University, Kuwait (Yahyaoui, H.) \|\| Department of Computer Science and Mathematics, Lebanese American University, Beirut, Lebanon (Mourad, A.; Baajour, L.)
Abstract	We introduce in this paper an abstract language on top of XACML (eXtensible Access Control Markup Language) for web services security. It is based on the automatic generation of XACML security policies from abstract XACML profile(s). Our proposed approach allows first to specify the XACML profiles, which are then translated using our intended compiler into XACML security policies. The main contributions of our approach are: (1) Describing dynamic security policies using an abstract and user friendly profile language on top of XACML, (2) generating automatically the the XACML policies and (3) separating the business and security concerns of composite web services, and hence developing them separately. Our solution address the problems related to the complexity and difficulty of specifying security policies in XACML and other standard languages. We tested the feasibility of our approach by developing the library system (LB) that is composed of several Web services and applying/realizing our approach to enforce security.
Starting Page	254
Ending Page	259
File Size	481114
Page Count	6
File Format	PDF
ISBN	9781457708848
e-ISBN	9781908320001
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-12-11
Publisher Place	United Arab Emirates
Access Restriction	Subscribed
Rights Holder	ICITST
Subject Keyword	RBAC Security Policies Web Services Security Security Business XACML
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Toward Systematic Integration of Security Policies into Web Services

Evaluating distributed xacml policies

RBAC Constraints Specification and Enforcement in Extended XACML

Runtime Administration of an RBAC Profile for XACML

Modeling location attributes using XACML-RBAC model

An extended RBAC profile of XACML

XACML policy integration algorithms: not to be confused with XACML policy combination algorithms!

Role based interoperability security policies in collaborative systems

An extended RBAC model for Web services in business process

Toward an abstract language on top of XACML for web services security

Similar Documents

Toward Systematic Integration of Security Policies into Web Services

Evaluating distributed xacml policies

RBAC Constraints Specification and Enforcement in Extended XACML

Runtime Administration of an RBAC Profile for XACML

Modeling location attributes using XACML-RBAC model

An extended RBAC profile of XACML

XACML policy integration algorithms: not to be confused with XACML policy combination algorithms!

Role based interoperability security policies in collaborative systems

An extended RBAC model for Web services in business process

Toward an abstract language on top of XACML for web services security