Abstract:Due to the dynamic, heterogeneous and interorganizational nature, different web services and different ports or operations in the same service, even the same services at different times may have their different security requirements because of their different security domains and different business backgrounds. How to design a flexible, fine-grained and comprehensive architecture for web services security processing has become a matter of great urgency. However, no ideal solutions have been worked out for these problems. As a result of our study, we have presented in this paper a policy-based architecture termed policy-based architecture for web services security processing (PBA4WSSP) to meet the dynamic, complete and fine-grained security requirements. In PBA4WSSP, the processing of all security problems is based on security policy in service stage to support flexibly security configuration. Moreover, we have designed a service policy model to describe the fine-grained security requirements. And the conversion method between security policy model and security policy expression has also been described. In addition, a staged complete security processing architecture is provided to reduce the dependency among protocol implementations. Furthermore, with PBA4WSSP, a web service security module has been designed and implemented as well. Eventually, the performance evaluation results amply demonstrate that our system is flexible and usable.

Design of SSPM management module of security middleware

Design of Secure Operating System

The Design of an Useful Security Management Model of PDMS and Its Realization

Research on Information Security Model and Security System Design

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

Porduct Group Design Method for the Service

Security Architecture to Support Multiple Security Policies Based on Access Control Space

General Model and Implementation of Security Management of PDM

The Design and Implementation of Message System-based and Customizable Single Sign out Service

Robust and Cost-Effective Design of Cyber-Physical Systems: an Optimal Middleware Deployment Approach

THE RESEARCH AND IMPLEMENTATION OF INTEGRATED SECURITY MANAGEMENT PLATFORM

Implementation and Performance Analysis of Multilevel Security System in Pervasive Computing Environment

Design and Application Research on Management Information System Security Architecture in Digital Campus

BPEL Based Method for General Security Control Module Design

A Program Manipulation Middleware and Its Applications on System Security.

WSDSNM3: A Web Services-based Distributed System and Network Management Middleware Model and Scheme

Research on Security System for PDM

SPMOS-Based Intrusion Detection Architecture

Pba4wssp: A Policy-Based Architecture for Web Services Security Processing

A Collaborative Network Security Management System in Metropolitan Area Network

The IPC in System V of Linux and the Implement of Security Communication