Abstract:In service oriented architecture (SOA) environment, the communication and infrastructure security is crucial. The most important specification addressing Web services security is WS-Security, which collaborates with the SOAP message specifications, providing integrity, confidentiality and authentication for Web services. However, WS-Security focuses SOAP message security between trusted partners. In SOA applications, there are other vulnerabilities which can be exploited to attack by anonymous customer or even trusted partners, and these vulnerabilities do not gain enough attention as WS-Security. Among them, denial-of-service (DoS) is one attack cluster, which exhausts computer and network resources and reduces the availability of Web services. Another one is sensitive data leakage in a specific application domain. In this paper, the security of SOA applications is viewed as the security domain and a three-tier domain was divided based on security domain analysis. For each security sub-domain, security requirement scenario and requirements are presented. The security domain models were given which can be used to build up security services for sub-domain. Based on security model and security service assets, which can evolve along with understanding on security domain, the developers can establish the security implementation for SOA application integration.

The Security Research and Implementation of SOAP on Web Services

The Simple Object Access Protocol In Web Services Architecture

SIP Authentication Mechanism and Its Performace Analysis

A PERFORMANCE COMPARISON OF SOAP RPC-STYLE AND MESSAGE-STYLE WEB SERVICES

Research on security extensions based on Java 2 security architecture

Secure digital watermark scheme based on Web Services

Construction of security architecture of web services based EAI

The Mechanism of the Data Sharing and Its Application Based on SOAP

Research Of Web Services Workflow And Its Key Technology Based On Xpdl

A Security Model Design in Web Service Environment

A New SIP SSO Mechanism

A Survey on Access Control for Web Services

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Role-Based Access Control System for Web Services

Research on Web Service Testing

Multi-Tier Security Feature Modeling for Service-Oriented Application Integration

Extending WS-Security to Implement Security Protocols for Web Services

Building high-speed roads: Improving performance of SOAP processing for cloud services

An Authentication and Authorization Solution Supporting SOA-based Distributed Systems

Research And Implementation Of Corba Web Services

Research on Web Service Push Techniques Based on Mobile Platform