Issue No. 04 - April (2004 vol. 37)
Rafae Bhatti , Purdue University
Elisa Bertino , Purdue University
Arif Ghafoor , Purdue University
James B.D. Joshi , University of Pittsburgh
Web services provide standard protocols for document exchange among data repositories. At the same time, they expose data and functionality to risks that traditional security models do not address. <p>An XML-based specification language provides content-based, context-aware document access that models the elements of role-based access-control. The model provides explicit support for conceptual level access control on underlying data repositories as well as dynamic updates of user profiles. The authors have validated the model and implemented a software architecture that disseminates secure documents for a single-enterprise Web services application.</p>
R. Bhatti, J. B. Joshi, E. Bertino and A. Ghafoor, "XML-Based Specification for Web Services Document Security," in Computer, vol. 37, no. , pp. 41-49, 2004.