Negotiated Security Policies for E-Services and Web Services

Download
  1. (PDF, 406 KB)
AuthorSearch for: ; Search for:
TypeArticle
ConferenceProceedings of the 2005 IEEE International Conference on Web Services (ICWS 2005), July 11-15, 2005., Orlando, Florida, USA
AbstractThe growth of the Internet has been accompanied by the growth of e-services (e.g. e-commerce, ehealth). This proliferation of e-services and the increasing attacks on them by malicious individuals have highlighted the need for e-service security. The security requirements of an e-service may be specified in an e-service security policy. The provider of the eservice is then responsible for implementing the security measures contained in the policy. However, a service consumer may have security preferences that are not reflected in the provider's e-service security policy (e.g. defense contractors may require higher levels of security). In order for service providers to reach a wider market, a way of customizing a security policy to a particular consumer is needed. We derive the content of an e-service security policy and propose a flexible approach that will allow an e-service provider and consumer to negotiate to an agreed-upon e-service security policy. In addition, we examine how our approach may be implemented in a Web Services environment and briefly describe the design of our security policy negotiation prototype.
Publication date
LanguageEnglish
AffiliationNRC Institute for Information Technology; National Research Council Canada
Peer reviewedNo
NRC number47449
NPARC number8913597
Export citationExport as RIS
Report a correctionReport a correction
Record identifier2236b48f-4999-428a-91ac-ef0809a4fb77
Record created2009-04-22
Record modified2016-05-09
Bookmark and share
  • Share this page with Facebook (Opens in a new window)
  • Share this page with Twitter (Opens in a new window)
  • Share this page with Google+ (Opens in a new window)
  • Share this page with Delicious (Opens in a new window)