• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>International journal of web services research >Security for Web Services: Standards and Research Issues
【24h】

Security for Web Services: Standards and Research Issues

机译：Web服务的安全性：标准和研究问题

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

This article discusses the main security requirements for Web services and it describes how such security requirements are addressed by standards for Web services security recently developed or under development by various standardizations bodies. Standards are reviewed according to a conceptual framework that groups them by the main functionalities they provide. Covered standards include most of the standards encompassed by the original Web Service Security roadmap proposed by Microsoft and IBM in 2002 (Microsoft and IBM 2002). They range from the ones geared toward message and conversation security and reliability to those developed for providing interoperable Single Sign On and Identity Management functions in federated organizations. The latter include Security Assertion Markup Language (SAML), WS-Policy, XACML, that is related to access control and has been recently extended with a profile for Web services access control; XKMS and WS-Trust; WS-Federation, Liberty Alliance and Shibboleth, that address the important problem of identity management in federated organizations. The article also discusses the issues related to the use of the standards and open research issues in the area of access control for Web services and innovative digital identity management techniques are outlined.
机译：本文讨论了Web服务的主要安全要求，并描述了各个标准化机构最近开发或正在开发的Web服务安全标准如何满足这些安全要求。根据概念框架对标准进行审查，该概念框架按提供的主要功能对其进行分组。涵盖的标准包括Microsoft和IBM在2002年提出的原始Web Service安全路线图所包含的大多数标准（Microsoft和IBM 2002）。它们的范围从面向消息和对话安全性和可靠性的功能，到为在联合组织中提供可互操作的单一登录和身份管理功能而开发的功能。后者包括与访问控制有关的安全性声明标记语言（SAML），WS-Policy，XACML，最近已使用Web服务访问控制的配置文件对其进行了扩展。 XKMS和WS-Trust； WS-Federation，Liberty Alliance和Shibboleth解决了联盟组织中身份管理的重要问题。本文还讨论了与使用标准有关的问题，并概述了Web服务访问控制和创新的数字身份管理技术领域中的开放研究问题。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号