Abstract:Web service-based application has become one of the dominative ones of the Internet. This trend brings more and more security challenges in reliability, confidentiality, and data nonrepudiation, especially in some systems that have massive diversified resources. An improved framework for secure accesses of Web resources is presented and implemented by extending and enhancing the Spring Security framework. It improves the security level of systems for identity authentication, authorized access, and secure transmission. The highly safe authentication is based on the integration of an improved authentication module of Spring Security with a U-key method and a RSA algorithm. For authorized access, the Spring Security's ACL (access control list) mechanism is improved by optimizing the domain object-level access control. For secure transmission, a compromising method is presented to take both the security level and the speed of data transmission into account by means of mixing the RSA and DES algorithms. In addition, the security interceptor of Spring Security is extended and a series of security filters are added to keep Web attacks away. The above improved security framework has been applied to an online virtual experiment platform named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems decreased dramatically. Moreover, VeePalms has been used in practice for about 2 years, which has proved the effectiveness of the security framework.

Web Service Security Specifications and the Realization Based on J2EE

Research on security extensions based on Java 2 security architecture

Construction of security architecture of web services based EAI

Design and implementation of web service security framework based on Axis2

An enhanced security mechanism for web service based systems

The Simple Object Access Protocol In Web Services Architecture

Securing SOAP Message Exchange with WS-Security

Research of XML Engine Security Model on Web Services

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

A SECURE MODEL OF WEB SERVICE BASED ON THE EXPANSIBILITY Of SOAP

Analysis and Research of Web Services Security

A Security Model Design in Web Service Environment

Research on a Secure Semantic Web Services Framework

Research of Data Security of Distributed System-based Web Services

Design and Implementation of Web Service Based on SOAP and Axis

Research on Web Services Security Mechanism Based on SOAP Extension

Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

AN INTEGRATED WEB SERVICES SECURITY MODEL

An Improved Security Framework for Web Service-Based Resources

Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Research and Application of Extended SSL Based on Web Service