Abstract:Web service-based application has become one of the dominative ones of the Internet. This trend brings more and more security challenges in reliability, confidentiality, and data nonrepudiation, especially in some systems that have massive diversified resources. An improved framework for secure accesses of Web resources is presented and implemented by extending and enhancing the Spring Security framework. It improves the security level of systems for identity authentication, authorized access, and secure transmission. The highly safe authentication is based on the integration of an improved authentication module of Spring Security with a U-key method and a RSA algorithm. For authorized access, the Spring Security's ACL (access control list) mechanism is improved by optimizing the domain object-level access control. For secure transmission, a compromising method is presented to take both the security level and the speed of data transmission into account by means of mixing the RSA and DES algorithms. In addition, the security interceptor of Spring Security is extended and a series of security filters are added to keep Web attacks away. The above improved security framework has been applied to an online virtual experiment platform named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems decreased dramatically. Moreover, VeePalms has been used in practice for about 2 years, which has proved the effectiveness of the security framework.

An Improved Security Framework for Web Service-Based Resources

An enhanced security mechanism for web service based systems

Research on security extensions based on Java 2 security architecture

Design and implementation of web service security framework based on Axis2

Construction of security architecture of web services based EAI

Integrated Security Framework for Secure Web Services

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Research on a Secure Semantic Web Services Framework

ON AJAX-BASED WEB SERVICE FRAMEWORK AND SECURITY

A System Framework of Security Management in Enterprise Systems

The Safety Analysis of the Unicom Resource Management System Based on Spring Security Security Framework

A Security Framework for Cloud-Based Web Crawling System

Improving Web Service Security and Privacy

THE IMPROVEMENT ON SESSION ENTITIES AUTHENTICATION PROTOCOL FOR WEB SERVICE

Security Architecture For Web Services

Security Enhancement for Web Applications in Education Platform at Chinese Academy of Sciences

AN INTEGRATED WEB SERVICES SECURITY MODEL

Discussion on the Application of Acegi Security Frame under Spring Frame

Research and Application of Java Security System in Web Program

Analysis and Research of Web Services Security

Role-Based Access Control System for Web Services