MODELLING AND DEPLOYING SECURITY POLICIES

Xabier Larrucea, Rubén Alonso

Abstract

Web Services (WS) platform is one of the most widely accepted implementations of Service Oriented Architectures (SOA). There is a huge amount of specifications related to the so-called WS-*. In this context Security Policies specification and deployment support is still immature and it needs improvement. This paper is focused on the growing importance of security, the increase of collaboration amongst organizations and the emergent need of modelling SOA and security aspects. This paper presents a methodology and modelling framework based on Eclipse platform for designing security aspects in SOA and a derivation mechanism in order to automatically generate web service security elements. This approach is illustrated with an example.

References

  1. Benguria, G. Larrucea, X., Elvesaeter, B.Neple, T., Beardsmore, A, Friess M. “A Platform Independent Model for Service Oriented Architectures”. I-ESA conference 2006, March 22-24, Bordeaux. Springer
  2. Larrucea, X. 2008. Method Engineering Approach for Interoperable Systems Development. Journal on Software Process: Improvement and Practice. Vol 13 issue 2. Pages 127-133. ISSN: 1077-4866.
  3. Larrucea, X. Alonso, R. 2008 ISOAS: Through an independent SOA security specification. International Seventh IEEE Conference on Commercial-off-theShelf (COTS)-Based Software Systems Pages 92-100. 2008 ISBN:978-0-7695-3091
  4. Larrucea, X. Benguria G, Schuster S. 2007. "MDSOA for Achieving Interoperability," iccbss, p. 247. Sixth International IEEE Conference on Commercial-offthe-Shelf (COTS)-Based Software Systems (ICCBSS'07)
  5. UML Profile and Metamodel for Services, 2006 Request For Proposal (RFP-OMG). http://www.omg.org/docs/soa/06-09-09.pdf
  6. UML™ Profile for Modeling Quality of Service and Fault Tolerance Characteristics and Mechanisms. 2004, Object Management Group. http://www.omg.org/docs/ptc/04-09-01.pdf .
  7. WS-security policy 1.2 (OASIS) 2007. http://docs.oasisopen.org/ws-sx/ws-securitypolicy/200702/wssecuritypolicy-1.2-spec-cs.pdf
  8. World Wide Web consortium. Web Services Policy 1.5, 2007 Attachment http://www.w3.org/TR/ws-policyattach/
Download


Paper Citation


in Harvard Style

Larrucea X. and Alonso R. (2009). MODELLING AND DEPLOYING SECURITY POLICIES . In Proceedings of the Fifth International Conference on Web Information Systems and Technologies - Volume 1: WEBIST, ISBN 978-989-8111-81-4, pages 411-414. DOI: 10.5220/0001825504110414


in Bibtex Style

@conference{webist09,
author={Xabier Larrucea and Rubén Alonso},
title={MODELLING AND DEPLOYING SECURITY POLICIES },
booktitle={Proceedings of the Fifth International Conference on Web Information Systems and Technologies - Volume 1: WEBIST,},
year={2009},
pages={411-414},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0001825504110414},
isbn={978-989-8111-81-4},
}


in EndNote Style

TY - CONF
JO - Proceedings of the Fifth International Conference on Web Information Systems and Technologies - Volume 1: WEBIST,
TI - MODELLING AND DEPLOYING SECURITY POLICIES
SN - 978-989-8111-81-4
AU - Larrucea X.
AU - Alonso R.
PY - 2009
SP - 411
EP - 414
DO - 10.5220/0001825504110414