Security Policy Approach for Semantic-Based Web Technology

Zhong Chen

2008-01-01

Abstract:Based on the Semantic Web technology extends the scope of policy management, In Web access control security through the reasoning of the policy to achieve the dynamic process of adjustment, presents a Web services security visit to the multi-level policy approach, for the next generation of Web services application in a useful exploration.

What problem does this paper attempt to address?

Implementation of Spatial Information Web Services Based on Ontology

CHEN Jian-jie,YANG Shu-feng,LI Chang-jiang

DOI: https://doi.org/10.3785/j.issn.1008-973x.2006.03.003

2006-01-01

Abstract:In order to improve the interoperation of spatial information,a new solution to implementation of discovery and retrieval for spatial information web services based on the ontology technology was proposed.After the knowledge expression of web services capacity using web ontology language for services(OWL-S)was introduced,an architecture for spatial information interaction was constructed,and a semantic matchmaker based on ontology was added into the traditional service registry center in the architecture.An actualized process of service request under the frame of spatial information web services was given on the frame of the standard open GIS consortium(OGC) web services.The results show that the ontology technology can extend the semantic of web services,re-use the same or similar web services,and improve the efficiency of reasoning.
Semantic-Aware Access Control for Grid Application

Xiyuan Chen,Yang OUYang,Miaoliang Zhu,Yan He

DOI: https://doi.org/10.1109/ICYCS.2008.407

2008-01-01

Abstract:The emerging grid infrastructure presents many challenging security issues that demand new access approach due to its inherent heterogeneity, multidomain characteristic and highly dynamic nature. In order to protect the secure sharing and coordinated use of diverse resources in distributed "virtual organizations", fine-grained access control in grid computing is therefore very necessary and important. In this paper, a semantic-aware access conrtol(SAAC) extending the RBAC with the semantic specification is proposed. Supplying semantic specification by the implementation of semantic inference engine (SIE), the administration for the applicability of users' role memberships to particular permissions is much more easy and precise. The enforcement of the SAAC model for grid application is presented. An experimental evaluation of its overheads is also described.
Using Semantic Web Technologies to Specify Constraints of RBAC

Wu Di,Jian Lin,Yabo Dong,Miaoliang Zhu

DOI: https://doi.org/10.1109/PDCAT.2005.247

2005-01-01

Abstract:Role-based access control (RBAC) models have generated a great interest in the security community as a powerful and generalized approach to security management. One of important aspects in RBAC is constraints that constrain what components in RBAC are allowed to do. There are lots of research have been achieved to specify constraints for secure system developers. However more work is need urgently to met requirements for interoperability of machine and people understandable constraints specification in open and distributed environment. In this paper we propose another approach to specify constraints using Semantic Web technologies. The Web Ontology Language (OWL) specification of basic RBAC components and constraints are described in detail.
Construction of security architecture of web services based EAI

Di Wu,Yabo Dong,Jian Lin,Miaoliang Zhu

DOI: https://doi.org/10.1007/11563952_52

2005-01-01

Abstract:The fast development of E-Commerce and information technology brings much higher requirements for enterprise informationization. Because of the differences in platforms, development languages and standards etc, enterprise application integration (EAI) has become the important form of enterprise informationization to support complex business processes. Web services have emerged as the next generation of integration technology which provides the power to support interoperability. However EAI doesn’t just present new interoperability challenges; it also presents serious privacy and security challenges. This paper presents security architecture of Web Services based EAI which uses distributed Single Sign On authentication and distributed Role-based Access Control authorization. The basic concept and prototype system of the security architecture are described in detail.
Web-based Application Services Composition for E-Business

Y Mei,ZC Chen,F Zhang

DOI: https://doi.org/10.1109/icebe.2005.129

2005-01-01

Abstract:Web service is becoming an important approach for enterprises to implement their business applications on Internet. However, most of Web services are built based on special business function, they are isolated and do not address the information communication for integrating the business processes. In this paper, we propose a new composition framework, which comprises the Web-based semantic definition for business messages, the methodology of constructing visualized integrated processes based on Business Process Execution Language (BPEL), and the strategy of vocabulary-based business rules for e-business. In addition, we present a case study that demonstrates the way of composing different kind of application services to a uniform service
Ontology-Based Conceptual Modeling Of Policy-Driven Control Framework: Oriented To Multi-Agent System For Web Services Management

Bs Liao,J Gao,J Hu,Jj Chen

DOI: https://doi.org/10.1007/978-3-540-30483-8_42

2004-01-01

Abstract:The integration of web services and intelligent agents is promising for automated service discovery, negotiation, and cooperation. But due to the dynamic and heterogeneous nature of web services and agents, it is challenging to guide the behaviors of underlying agents to meet the high-level business (changeful) requirements. Traditional Policy-driven methods (Ponder, Rei, KAoS, etc) are not adaptable to direct the discovery, negotiation and cooperation of dynamic agents who may join in or leave out of a specific community or organization (virtual organization) at run time. The purpose of this paper is to model an ontology-based, policy-driven control framework that is suitable to supervise the dynamic agents according to high-level policies. On the basis of federated multi-agents infrastructure and ontologies of policies, domain concepts, and agent federations, a model of role-based policy specification framework is presented in this paper.
A policy tree-based architecture for web services authorization

Hao Zeng,Yongwang Zhao,Dianfu Ma

DOI: https://doi.org/10.12733/jcis7282

2013-01-01

Journal of Computational Information Systems

Abstract:Web service has emerged as a fundamental technique for developing Web application due to its highly dynamic and cross-domain characteristics, but which still pose new challenges and difficulties for web services authorization. However, the system-centric view (static control environment) of protecting services and resources taken by traditional access control models is not suitable for web service environment. As is presented in this paper, one finding of our study is a Policy Tree based architecture for web services authorization termed PTBA4WSA. It is established on a staged attribute based access control framework. The paper proposes a Policy Tree model to describe subjects, resources as well as environment attributes, and it also presents a loading classification based policy evaluation algorithm. Both of which cannot only provide high-efficient and _ne-grained access control for web services, but also can support access control policy release mechanism. With PTBA4WSA, we design and implement a service authorization processing system which exhibits high efficiency and availability as is shown by the performance evaluation results. © 2013 Binary Information Press.
Pba4wssp: A Policy-Based Architecture for Web Services Security Processing

Hao Zeng,Dianfu Ma,Yongwang Zhao,Zhuqing Li

DOI: https://doi.org/10.1007/s11761-013-0143-5

2013-01-01

Abstract:Due to the dynamic, heterogeneous and interorganizational nature, different web services and different ports or operations in the same service, even the same services at different times may have their different security requirements because of their different security domains and different business backgrounds. How to design a flexible, fine-grained and comprehensive architecture for web services security processing has become a matter of great urgency. However, no ideal solutions have been worked out for these problems. As a result of our study, we have presented in this paper a policy-based architecture termed policy-based architecture for web services security processing (PBA4WSSP) to meet the dynamic, complete and fine-grained security requirements. In PBA4WSSP, the processing of all security problems is based on security policy in service stage to support flexibly security configuration. Moreover, we have designed a service policy model to describe the fine-grained security requirements. And the conversion method between security policy model and security policy expression has also been described. In addition, a staged complete security processing architecture is provided to reduce the dependency among protocol implementations. Furthermore, with PBA4WSSP, a web service security module has been designed and implemented as well. Eventually, the performance evaluation results amply demonstrate that our system is flexible and usable.
WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Cheng Zhan,Xie Li

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.10.007

2008-01-01

Abstract:Web Service security problem is one of the highlighted topics in information security area recently.This article presents two security mechanisms for Web Services,transport-level security and message-level security.Then the security technology used to implement message-level security is introduces in detail.Finally,it gives a conclusion to Web Service security and proposes a new Web Service layered security model.
A Web Services Security Policy Description Model

Hao Zeng,Yong Wang Zhao,Dian Fu Ma

DOI: https://doi.org/10.4028/www.scientific.net/amm.644-650.2943

2014-01-01

Applied Mechanics and Materials

Abstract:With the rapid development of web services technology, the security policies defined in WS-SecurityPolicy are widely used for expressing security properties, capabilities, constraints and requirements of web services. It is well-known that security policies are crucial in the negotiation phase of service discovery and selection. However, such security policies are hard to understand and extremely error-prone, due to the complexity of the WS-SecurityPolicy specification. At the same time, because the WS-SecurityPolicy is described by natural language, there have ambiguity problem. These problem seriously hindered the development of web services policy. Therefore, this paper proposes a web services security policy description model to describe accurately and clearly security policies. The security policy model employs the formal modeling method to convert the policy assertions into the security rules.
Integrative Security Management for Web-Based Enterprise Applications

Chen Zhao,Yang Chen,Dawei Xu,NuerMaimaiti Heilili,Zuoquan Lin

DOI: https://doi.org/10.1007/11563952_54

2005-01-01

Abstract:In enterprise environment, security becomes increasingly important and costly. Enterprises are struggling to protect the increasing amount of disparate resources. Simple patchwork of security controls no longer suffices. Enterprises require a comprehensive solution that provides centralized security management, from authentication, to authorization and to auditing. To this end, we present a design and implementation of an integrative security management solution for Web-based enterprise applications, WebDaemon. It provides Single Sign-On to multiple Web applications. It also provides restricted access to Web-based content, portals, and Web applications based on Role-Based Access Control (RBAC) policies. The WebDaemon can help enterprises secure all Web resources with consistency of policy management and reduced administrative costs.
An operational model of security policies in Service-Oriented Applications

Zhang Yuan,Sun Meng

DOI: https://doi.org/10.1109/ICSESS.2011.5982244

2011-01-01

Abstract:We use a scenario-based visual notation, called Policy Sequence Chart (PSC), for specifying security policies in service coordination. A security policy defines a set of security requirements that correspond to permissions, prohibitions and obligations to some executions when some contextual conditions are satisfied. In this paper, we propose an approach of defining operational semantics of PSCs in terms of constraint automata, which can be used as the semantic foundation for checking compliance between service coordination and the security policies.An
An Integrated Formal Approach to Semantic Work Environments Design

Hai H. Wang,Nicholas Gibbins,Jin Song Dong,Yuan Fang Li,Jing Sun,Jeff Pan,Terry R. Payne

DOI: https://doi.org/10.4018/978-1-59904-877-2.ch015

2008-01-01

Abstract:The Semantic Web (Berners-Lee, Hendler, & Lassila, 2001) has become increasingly significant as it proposes an evolution of the current World Wide Web from a web of documents to a distributed and decentralised, global knowledge-base. Based on the notion of interlinked resources grounded within formally defined ontologies, it promises to be an enabling technology for the automation of many Web-based tasks, by facilitating a shared understanding of a domain through inference over shared knowledge models. Semantic Work Environment (SWE) applications use Semantic Web techniques to support the work of the user by collecting knowledge about the current needs in a specific activity, and providing both inferred and augmented knowledge that can then be integrated into current work. Web Services have emerged as distributed, heterogeneous software components that provide machine access to the services otherwise offered on the Web through Web pages. Built upon defacto Web standards for syntax, communication protocols, and markup languages such as XML, Web services provide a near ubiquitous mechanism for communication between applications and agents. In addition, such services can be composed to provide additional functionality, thus facilitating the rapid construction of new services. However, the dynamic use of services is limited by the need to agree a-priori upon data models and interface definitions. By coupling Web service technology with Semantic Web technology, Semantic Web Services can partially relax these constraints, both in the dynamic use of services, and in the data models shared by such services. Several examples of such services have been developed, for example, the ITTALKS services (Cost, Finin, & Joshi, 2002), which are considered in this chapter.
A policy-based architecture for web services authentication

Hao Zeng,Dianfu Ma,Yongwang Zhao,Zhuqing Li

DOI: https://doi.org/10.1109/ISCC.2013.6754982

2013-01-01

Abstract:With the rapid development of the Internet, web service technology has been extensively used in distributed applications and is highly likely to replace other various technologies for the distributed application development. However, concerning most hard issues of the web services authentication, no proper solutions have been discovered and available for use now. Due to its dynamic and cross-domain characteristics, web services authentication is confronted with new challenges and difficulties. Each service or autonomous domain may have their separate authentication technologies and identity token types. Meanwhile, the same services may adopt different authentication technologies in terms of different application scenarios. Therefore, the difficult question arises as how to design an integrated and flexible architecture to enhance trust in web services. According to our findings, presented in this paper is a policy-based architecture for web services authentication termed PBA4WSA. Compared with the other architectures, the PBA4WSA can better satisfy the characteristics of web services.
Policy-Driven Model For Autonomic Management Of Web Services Using Mas

Fan Zhang,Ji Gao,Bei-Shui Liao

DOI: https://doi.org/10.1109/ICMLC.2006.258812

2006-01-01

Abstract:Web service is an important technology in open distributed system. But because of the dynamical and heterogeneous nature of web services, it is difficult to be managed directly. On the other hand, multi-agent system provides a model for automatic discovery, negotiation and cooperation. It can be designed as a container of web services for autonomic management. This paper provides a policy-driven model base on multi-agent system that encapsulates the web service as an agent. It can supervise the dynamical agents and web services that may join in or leave out at run time according to high-level policies or business requirements.
Policy-based Secure Application Framework for Mobile Devices

Chen Zhong

2005-01-01

Abstract:In this paper,a policy-based secure application framework for mobile devices is proposed.This framework uses XML to describe access control policy,integrates authentication,trusted channel and other security mechanisms to control the user’s secure access to the device’s resources and network services through devices.
Ontology-based Web Services Query Mechanism

ZHANG Po,ZHU Qian,XU Jian-jun,LI Juan-zi,WANG Ke-hong

DOI: https://doi.org/10.3969/j.issn.1006-5911.2006.08.027

2006-01-01

Computer Integrated Manufacturing Systems

Abstract:To solve the problem of lacking effective services query mechanism in existing Web services and maximize the using of Web services,a semantic Web technology based Web services query mechanism was proposed.With this mechanism,the Web services related ontology information,domain dependent and independent basic conceptual ontology information were adopted.Combined with a former system Web Oriented Distributed Ontology System(WODOS) which supported ontology-based reasoning, a new system Web Services Intelligent Discovery System(WSIDS) based on domain rules and F-logic reasoning engine was implemented.At the same time,Web services constraint model: Subject,Property,Value,Action(SPVA),and semantic supplement model were proposed.Finally,an application case was used to illustrate reasoning process and running result of this system,and was also compared with other related tasks.
Semantic Matching of Security Policies to Support Security Experts

Othman Benammar,Hicham Elasri,Abderrahim Sekkaki

DOI: https://doi.org/10.48550/arXiv.1303.7085

2013-03-28

Cryptography and Security

Abstract:Management of security policies has become increasingly difficult given the number of domains to manage, taken into consideration their extent and their complexity. Security experts has to deal with a variety of frameworks and specification languages used in different domains that may belong to any Cloud Computing or Distributed Systems. This wealth of frameworks and languages make the management task and the interpretation of the security policies so difficult. Each approach provides its own conflict management method or tool, the security expert will be forced to manage all these tools, which makes the field maintenance and time consuming expensive. In order to hide this complexity and to facilitate some security experts tasks and automate the others, we propose a security policies aligning based on ontologies process; this process enables to detect and resolve security policies conflicts and to support security experts in managing tasks.
ACCESS CONTROL POLICY COMPOSITION FOR WS-BPEL

Chen Jianfei,Han Weili

DOI: https://doi.org/10.3969/j.issn.1000-386X.2012.03.052

2012-01-01

Abstract:In Web Service composition,the access control policies are usually defined by external sub-services for protecting safe use of resources,while in composite scripts there are the complex control logic structure as well.These two factors make it extremely complicated for a system security administrator to specify the access control policies for composite services.In this paper we propose a condition-based access control policy model and the related policy composition algebra,and map the control structures familiar in WS-BPEL to corresponding policy composition expression,then construct the access control policies of the composite service based on the composition of access control policies of external sub-services.Finally,we design a prototype to depict the total process of policy composition.
A QoS-Driven Approach for Semantic Service Composition.

Yixin Yan,Bin Xu,Zhifeng Gu,Sen Luo

DOI: https://doi.org/10.1109/cec.2009.44

2009-01-01

Abstract:Semantic information, which is well-regulated and easy to be retrieved, has greatly enriched the expressive ability of the Web. These advantages can be applied in Web Services to meet the increasing complexity of Web applications. In this paper, we propose a service composition approach. It combines the large-scaled Web Services and semantic information which is described in WSCpsila09. Besides, QoS has become a critical issue to evaluate the performance of Web applications. Being different from improving the QoS of single services, our approach focuses on the overall QoS of the service composition. The algorithm shows that the semantic information based and QoS driven approach improves the efficiency and QoS performance of service composition.

Security Policy Approach for Semantic-Based Web Technology

Implementation of Spatial Information Web Services Based on Ontology

Semantic-Aware Access Control for Grid Application

Using Semantic Web Technologies to Specify Constraints of RBAC

Construction of security architecture of web services based EAI

Web-based Application Services Composition for E-Business

Ontology-Based Conceptual Modeling Of Policy-Driven Control Framework: Oriented To Multi-Agent System For Web Services Management

A policy tree-based architecture for web services authorization

Pba4wssp: A Policy-Based Architecture for Web Services Security Processing

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

A Web Services Security Policy Description Model

Integrative Security Management for Web-Based Enterprise Applications

An operational model of security policies in Service-Oriented Applications

An Integrated Formal Approach to Semantic Work Environments Design

A policy-based architecture for web services authentication

Policy-Driven Model For Autonomic Management Of Web Services Using Mas

Policy-based Secure Application Framework for Mobile Devices

Ontology-based Web Services Query Mechanism

Semantic Matching of Security Policies to Support Security Experts

ACCESS CONTROL POLICY COMPOSITION FOR WS-BPEL

A QoS-Driven Approach for Semantic Service Composition.