Modeling permissions in a (U/X)ML world

— Service Oriented Architectures with underlying technologies like web services and web services orchestration have opened the door to a wide range of novel application scenarios, especially in the context of inter-organizational cooperation. One of the remaining obstacles for a widespread use of these techniques is security. Companies and organizations open their systems and core business processes to partners only if a high level of trust can be guaranteed. The emergence of web services security standards provides a valuable and effective paradigm for addressing the security issues arising in the context of inter-organizational ion. The low level of abstraction of these standards is, however, still an unresolved issue which makes them inaccessible to the domain expert and remains a major obstacle when aligning security objectives with the customer needs. Their complexity makes implementation easily prone of error. The SECTET – a model-driven security engineering framework for B2B...

• Type: Conference
• Year: 2006
• Where: IEEEARES
• Authors: Muhammad Alam, Ruth Breu, Michael Hafner
• Keywords: IEEEARES 2006, Security, Security Privacy, Web Services, Web Services Security