Generic Security Policy Transformation Framework for WS-Security
- 1 July 2007
- conference paper
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 513-520
- https://doi.org/10.1109/icws.2007.92
Abstract
Model-driven security is a framework to configure WS-security easily. It generates a security policy written in WS-security policy to be transformed into platform-specific configuration files. Since the WS-security policy specification is quite complicated, it is difficult to directly map between a security policy and a configuration. We propose a generic security policy transformation framework using an intermediate model. The intermediate model structure is designed based on the WS-security message structure, because both a security policy and the configuration files correspond to one WS-security message, even though the WS-security policy is flexible in specifying security requirements. Our contributions are simpler transformation rules compared to direct mapping, the support for various platforms, and more flexible updates if the WS-security policy specification changes. We demonstrate the transformation using the intermediate model for WebSphere application server 6.0.Keywords
This publication has 6 references indexed in Scilit:
- Model Driven Extra-Functional Properties for Web ServicesPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2006
- Federated Security: Lightweight Security Infrastructure for Object Repositories and Web ServicesPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2006
- Adding Authentication to Model Driven SecurityPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2006
- Verifying policy-based security for web servicesPublished by Association for Computing Machinery (ACM) ,2004
- Best-practice patterns and tool support for configuring secure Web services messagingPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2004
- Multidimensional security policy management for dynamic coalitionsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2002