Sciweavers

Share
ICWS
2004
IEEE

Best-Practice Patterns and Tool Support for Configuring Secure Web Services Messaging

10 years 4 months ago
Best-Practice Patterns and Tool Support for Configuring Secure Web Services Messaging
This paper presents an emerging tool for security configuration of service-oriented architectures with Web Services. Security is a major concern when implementing mission-critical business transactions and such concern motivated the development of Web Services Security (WS-Security). However, the existing tools for configuring the security properties of Web Services give a technology-oriented view, and only assist in choosing the data to encrypt and selecting an encryption algorithm. The users must construct their own mental models of how the security configurations actually relate to business policies. In contrast, the tool described here gives a simplified, business-policy-oriented view. It models the messaging with customers and business partners, lists various threats, and presents best-practice security patterns against the threats. A user can select among variations on the basic patterns according to the business policies, and then apply them to the messaging model through the G...
Michiaki Tatsubori, Takeshi Imamura, Yuhichi Nakam
Added 31 Oct 2010
Updated 31 Oct 2010
Type Conference
Year 2004
Where ICWS
Authors Michiaki Tatsubori, Takeshi Imamura, Yuhichi Nakamura
Comments (0)
books