Abstract:Due to the dynamic, heterogeneous and interorganizational nature, different web services and different ports or operations in the same service, even the same services at different times may have their different security requirements because of their different security domains and different business backgrounds. How to design a flexible, fine-grained and comprehensive architecture for web services security processing has become a matter of great urgency. However, no ideal solutions have been worked out for these problems. As a result of our study, we have presented in this paper a policy-based architecture termed policy-based architecture for web services security processing (PBA4WSSP) to meet the dynamic, complete and fine-grained security requirements. In PBA4WSSP, the processing of all security problems is based on security policy in service stage to support flexibly security configuration. Moreover, we have designed a service policy model to describe the fine-grained security requirements. And the conversion method between security policy model and security policy expression has also been described. In addition, a staged complete security processing architecture is provided to reduce the dependency among protocol implementations. Furthermore, with PBA4WSSP, a web service security module has been designed and implemented as well. Eventually, the performance evaluation results amply demonstrate that our system is flexible and usable.

Unified Policy Management System and General Rule of Security Product

Research of United Platform of Network Security Management Model

Design and Implementation of Unified Access Control System Based on LDAP

Poster: Collaborative Policy Administration

Security management for large computer networks

Management System in Routing and Switching Platforms

THE RESEARCH AND IMPLEMENTATION OF INTEGRATED SECURITY MANAGEMENT PLATFORM

New Study and Implementation of Policy Based Network Management System

Integrative Security Management for Web-Based Enterprise Applications

Policy-based Access Control in Enterprise Information System

Study and Implementation of United Platform of Network Security Management

Modeling on Policy Conflict for Managing Heterogeneous Security Systems in Distributed Network Environment

Experimental integration of multi security policies for secure computer systems

UTM-CM: A Practical Control Mechanism Solution for UTM System

A System Framework of Security Management in Enterprise Systems

Toward A Practical Scheme For Ipsec Management

Security Architecture to Support Multiple Security Policies Based on Access Control Space

RESEARCH AND IMPLEMENTATION OF SECURITY POLICY CONFIGURATION TOOLS OF WS-Security BASED ON GMF

Design and Implementation of the Security Policy System in VPN Systems

Pba4wssp: A Policy-Based Architecture for Web Services Security Processing

A Personified Network Security Intelligent Centralized Management Mechanism