NDLI: New approach for the dynamic enforcement of Web services security

Content Provider	IEEE Xplore Digital Library
Author	Mourad, A. Ayoubi, S. Yahyaoui, H. Otrok, H.
Copyright Year	2010
Description	Author affiliation: Department of Computer Science, Kuwait University, Kuwait (Yahyaoui, H.) \|\| Department of Computer Science and Mathematics, Lebanese American University, Beirut, Lebanon (Mourad, A.; Ayoubi, S.) \|\| Department of Computer Engineering, Khalifa University of Science, Technology & Research, Abu Dhabi, UAE (Otrok, H.)
Abstract	We propose in this paper a new approach for the dynamic enforcement of Web services security, which is based on a synergy between Aspect-Oriented Programming (AOP) and composition of Web services. Security policies are specified as aspects. The elaborated aspects are then weaved (integrated) in the Business Process Execution Language (BPEL) process at runtime. The main contributions of our approach are threefold: (1) separating the business and security concerns of composite Web services, and hence developing them separately (2) allowing the modification of the Web service composition at run time and (3) providing modularity for modeling cross-cutting concerns between Web services. We demonstrate the feasibility of our approach by developing a Flight System (FS) that is composed of several Web services. First, a RBAC (Role Based Access Control) model for the flight system, which we called RBAC-FS, is elaborated. Afterwards, the Web services that implement the security features are developed. Finally, the BPEL aspects that integrate the security functionalities dynamically into the BPEL process are created. The devised aspects realize the elaborated RBAC-FS model and provide authentication and access control features to the flight system. Case studies and experimental results are also presented to defend our propositions.
Starting Page	189
Ending Page	196
File Size	455896
Page Count	8
File Format	PDF
ISBN	9781424475513
e-ISBN	9781424475506
e-ISBN	9781424475490
DOI	10.1109/PST.2010.5593232
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-08-17
Publisher Place	Canada
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authorization Web services Authentication Lead Business
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Integrated Security Framework for Secure Web Services

A Combined Grid Security Approach Based on Web Services Security Specifications

An authorization model for Web Services within SOA

New Framework for Authentication and Authorization for e-Health Service Systems

Web Services Security Policy

A new method for consistency of access control in web services

Towards Unconditional Anonymity: Privacy Enforcement Model in Web Services

The specification and enforcement of advanced security policies

Towards a Formal Framework for Developing Secure Web Services

New approach for the dynamic enforcement of Web services security

Similar Documents

Integrated Security Framework for Secure Web Services

A Combined Grid Security Approach Based on Web Services Security Specifications

An authorization model for Web Services within SOA

New Framework for Authentication and Authorization for e-Health Service Systems

Web Services Security Policy

A new method for consistency of access control in web services

Towards Unconditional Anonymity: Privacy Enforcement Model in Web Services

The specification and enforcement of advanced security policies

Towards a Formal Framework for Developing Secure Web Services

New approach for the dynamic enforcement of Web services security