• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>International Journal of Soft Computing and Software Engineering >Enhancing Web Services Security in E-business
【24h】

Enhancing Web Services Security in E-business

机译：增强电子商务中的Web服务安全性

获取原文
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Nowadays, most of enterprises are using Web Services as a new wave for exchanging information in their e-business integration. Security is a major concern when Web Services are emerged. Web Services are based on SOAP(Simple Object Access Protocol) message for exchanging information. In e- business, this information may be sensitive and there is a huge possibility that SOAP message is intercepted and modified by eavesdroppers. In This research, we discuss the significant impact of adoption Web Services in e-business, whereas Web Services support application-to-application interactions. However, security still the biggest challenge that faces Web Services. We also highlight the web services security standards that may be used to ensure Web Services security. Any proposed security model must consider the securities' goals which are integrity, authorization, authentication, confidentiality and non- repudiation. In this research, we focus on SOAP message and how to ensure its security, since the SOAP message is the transmission unit in Web Services. We proposed a security model to enhance security of e-business. This model is based on XML signature and XML encryption to sign and encrypt SOAP message. Moreover, RSA is the encryption algorithm that used for encryption. We expect that our proposed model will achieve a good security with acceptable performance.
机译：如今，大多数企业都将Web Services用作电子商务集成中交换信息的新潮流。当出现Web服务时，安全性是一个主要问题。 Web服务基于用于交换信息的SOAP（简单对象访问协议）消息。在电子商务中，此信息可能很敏感，并且SOAP消息很有可能被窃听者拦截和修改。在本研究中，我们讨论了采用Web服务在电子商务中的重大影响，而Web服务则支持应用程序到应用程序的交互。但是，安全性仍然是Web服务面临的最大挑战。我们还将重点介绍可用于确保Web服务安全性的Web服务安全标准。任何提议的安全模型都必须考虑证券的目标，即完整性，授权，认证，机密性和不可否认性。在本研究中，我们将重点放在SOAP消息以及如何确保其安全性上，因为SOAP消息是Web服务中的传输单元。我们提出了一种安全模型来增强电子商务的安全性。该模型基于XML签名和XML加密来对SOAP消息进行签名和加密。此外，RSA是用于加密的加密算法。我们希望我们提出的模型能够以可接受的性能实现良好的安全性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号