Abstract:Web service-based application has become one of the dominative ones of the Internet. This trend brings more and more security challenges in reliability, confidentiality, and data nonrepudiation, especially in some systems that have massive diversified resources. An improved framework for secure accesses of Web resources is presented and implemented by extending and enhancing the Spring Security framework. It improves the security level of systems for identity authentication, authorized access, and secure transmission. The highly safe authentication is based on the integration of an improved authentication module of Spring Security with a U-key method and a RSA algorithm. For authorized access, the Spring Security's ACL (access control list) mechanism is improved by optimizing the domain object-level access control. For secure transmission, a compromising method is presented to take both the security level and the speed of data transmission into account by means of mixing the RSA and DES algorithms. In addition, the security interceptor of Spring Security is extended and a series of security filters are added to keep Web attacks away. The above improved security framework has been applied to an online virtual experiment platform named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems decreased dramatically. Moreover, VeePalms has been used in practice for about 2 years, which has proved the effectiveness of the security framework.

Research and Application of Java Security System in Web Program

Research on security extensions based on Java 2 security architecture

An enhanced security mechanism for web service based systems

Research on Information Security Model and Security System Design

A Resolvment of the Web Security Based on B/S Structure

An Improved Security Framework for Web Service-Based Resources

Security of Application System

Design and implementation of web service security framework based on Axis2

Security Access Control Scheme for the Web Service Based on Property

Research and Implementation of Security Vulnerability Detection in Application System of WEB Static Source Code Analysis Based on JAVA

AN INTEGRATED WEB SERVICES SECURITY MODEL

The Implementation of Dynamic Password Authentication System in College Education Informatization Using Java Socket

Research and Implementation of RBAC-based Security Architecture of J2EE

Research of Data Security of Distributed System-based Web Services

Integrative Security Management for Web-Based Enterprise Applications

Integrated Security Framework for Secure Web Services

Design and Realization for More Flexible Authentication Authorization System

APPLICATION AND STUDIES ON SECURITY ARCHITECTURE OF WIRELESS JAVA

J2EE-based Authentication System of Expansive Training for the University Student

The Design and Implementation of a Certificate-based Secure Multimedia Conference System MCS/CA

Construction of College English Network Communication Platform Based on Java Technology