Data di Pubblicazione:
2004
Citazione:
Semantics-aware perimeter protection / M. Cremonini, E. Damiani, P. Samarati - In: Data and applications security XVII : status and prospects : IFIP TC11/WG11.3 seventeenth Annual Working Conference on data and applications security, August 4-6, 2003, Estes Park, Colorado, USA / Sabrina De Capitani di Vimercati, Indrakshi Ray, Indrajit Ray. - Boston : Kluwer academic, 2004. - ISBN 1402080697. - pp. 229-242 (( Intervento presentato al 17. convegno IFIP TC-11 WG 11.3 Seventeenth Annual Working Conference on Data and Application Security, 2003 tenutosi a Estes Park, USA nel 2003.
Abstract:
Web services security is becoming a critical concern for any organization adopting the XML-based Web services approach to application integration. While many access control techniques for Web services are becoming available, several issues still need to be solved in order to correctly split the burden of securing Web services between the perimetral and the service level. In this paper, a technique is presented able to make perimetral defences semantics-aware. Application-level {\it semantics-aware firewalls} enforce filtering rules directly on SOAP messages based on the nature of the services they request. Our semantics-aware firewalls rules are written using a flexible XML-based syntax that allows sharing metadata concepts with service level access control policies, supporting complex security policies that integrate perimetral defences with access control. Moreover, they can be quickly integrated into organizations' existing infrastructure, deployed rapidly and scaled as needed. Also, they integrate easily with existing infrastructure and can be operated by current staff, potentially achieving a low total cost of ownership with respect to service level solutions.
Tipologia IRIS:
03 - Contributo in volume
Keywords:
Web services; Security; Semantics; Perimeter protection
Elenco autori:
M. Cremonini, E. Damiani, P. Samarati
Link alla scheda completa:
Titolo del libro:
Data and applications security XVII : status and prospects : IFIP TC11/WG11.3 seventeenth Annual Working Conference on data and applications security, August 4-6, 2003, Estes Park, Colorado, USA