The Community for Technology Leaders
RSS Icon
Subscribe
Salt Lake City, Utah, USA
July 9, 2007 to July 13, 2007
ISBN: 0-7695-2924-0
pp: 497-504
Kouichi Ono , Tokyo Research Laboratory, IBM Research
Yuichi Nakamura , Tokyo Research Laboratory, IBM Research
Fumiko Satoh , Tokyo Research Laboratory, IBM Research
Takaaki Tateishi , Tokyo Research Laboratory, IBM Research
ABSTRACT
<p>The Service-Oriented Architecture (SOA) makes application development easier, because applications can be built from existing services with a bottom-up methodology. However, it is difficult to determine if a desired new service can be built from existing services. Not only the functional consistency of the existing services, but also the consistency of their non-functional (such as security) aspects must be verified. Message protection is an aspect of security. Every service needs an appropriate security policy defining the protection of messages exchanged between the parties to the service. Because of the intricacy of the Web Services Security Policy Language, it is difficult to verify the consistency of the security policies.</p> <p>We are developing a method to verify the consistency of security policies by abstracting them. Each security policy is abstracted, and then attached as a security type to the corresponding service in the application model. The security type denotes a security level for message protection. The security developer defines the possible abstraction methods. In this paper, we define the constraint of abstraction methods based on the semantics of the policy language. And also we state verifying the consistemcy of security types by using information flow analysis.</p>
CITATION
Kouichi Ono, Yuichi Nakamura, Fumiko Satoh, Takaaki Tateishi, "Verifying the Consistency of Security Policies by Abstracting into Security Types", ICWS, 2007, 2013 IEEE 20th International Conference on Web Services, 2013 IEEE 20th International Conference on Web Services 2007, pp. 497-504, doi:10.1109/ICWS.2007.187
51 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool