【24h】

Container-Level Security Certification of Services

机译:容器级服务安全认证

获取原文
获取原文并翻译 | 示例

摘要

The increasing success of the Service-Oriented Architecture (SOA) paradigm has fostered the implementation of complex services, including business processes, via dynamic selection and composition of remote services providing single functionality. Run-time selection and composition of services require the deployment of high-level security standards for the SOA infrastructure, to increase the confidence of both service consumers and providers that the services satisfy their security requirements and behave as expected. In this context, certification can play a fundamental role and provide the evidence that a set of properties hold for a given service. Security certification of services can involve two different aspects: i) the evaluation of the container in which the service is deployed, in terms of compliance with web service security standards and policies; ii) the verification and validation of the service implementation. In this chapter, we focus on the first aspect and we propose an overview of container-level certification of services.
机译:面向服务的体系结构(SOA)范式日益成功,通过动态选择和组合提供单一功能的远程服务,促进了包括业务流程在内的复杂服务的实现。服务的运行时选择和组合要求为SOA基础结构部署高级安全性标准,以提高服务使用者和提供者对服务满足其安全性要求并按预期方式运行的信心。在这种情况下,认证可以发挥基本作用,并提供证明一组属性可用于给定服务的证据。服务的安全性认证可以涉及两个不同的方面:i)根据Web服务安全性标准和策略对部署服务的容器进行评估; ii)验证和确认服务实施。在本章中,我们着重于第一个方面,并提出了容器级服务认证的概述。

著录项

  • 来源
  • 会议地点 Malaga(ES)
  • 作者单位

    Dipartimento di Tecnologie dell'Informazione Universita degli Studi di Milano Via Bramante 65, 26013 Crema (CR), Italia;

    Dipartimento di Tecnologie dell'Informazione Universita degli Studi di Milano Via Bramante 65, 26013 Crema (CR), Italia;

    Dipartimento di Tecnologie dell'Informazione Universita degli Studi di Milano Via Bramante 65, 26013 Crema (CR), Italia;

  • 会议组织
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号