Developing a Framework to Implement Security in Web Services

  • Fawaz Amin Alvi
  • Shakeel A. Khoja
  • Zohra Jabeen
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 3032)

Abstract

Recent advancement in XML and increasing use of World Wide Web allow users to use internet as a document sharing and hosting system, with certain security features. Currently no guidelines are available for developers to enforce security policies for XML and Web Services. It is crucial in order to facilitate a secure dissemination of XML documents, containing information of different sensitivity levels, among (possibly large) user communities. The paper concentrates on developing a framework and proposing design considerations to implement the PKI enables security in XML documents and web services, by defining a component model and processing rules that can be shared across applications using common tools, avoiding the need for extensive customisation of applications to add security. This allows interoperability with a wide range of existing infrastructures and across deployments.

References

  1. 1.
    Bertino, E., Ferrari, E.: Secure and Selective Dissemination of XML Documents. ACM Transaction on Information and System Security 5 (2002)Google Scholar
  2. 2.
    Dournee, B.: XML Security. McGraw Hill Inc., USA (2002)Google Scholar
  3. 3.
    Sturm, J.: Developing XML Solutions. Microsoft Press Inc., USA (2002)Google Scholar
  4. 4.
    Allen Wyke, R., Rehman, S., Brad, J.: XML Programming. Microsoft Press Inc., USA (2001)Google Scholar
  5. 5.
    Deutsch, A., Fernandez, M., Florescu, D., Levy, A., Suciu, D.: Securing XML documents. In: Proceedings of the International Conference on World Wide Web (1999)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2004

Authors and Affiliations

  • Fawaz Amin Alvi
    • 1
  • Shakeel A. Khoja
    • 2
  • Zohra Jabeen
    • 1
  1. 1.Sir Syed University of Engineering and TechnologyKarachiPakistan
  2. 2.Karachi Institute of Information TechnologyKarachiPakistan

Personalised recommendations