Five examples of web-services for illustrating requirements for security architecture

Addie, Ronald G. and Moffatt, Sam and Dekeyser, Stijn and Colman, Alan (2011) Five examples of web-services for illustrating requirements for security architecture. In: 2nd International Conference on Data and Knowledge Engineering (ICDKE 2011), 6-8 Sep 2011, Milan, Italy.

PDF (Accepted Version)

Download (169Kb)


The tension caused by the need for expressive power when formulating security rules and the need to keep computational complexity low when undertaking the necessary
access rule evaluations is a major challenge in the formulation of good security architecture. This paper provides five examples of security in web services. which illustrate this tension. These examples highlight the need for more expressiveness in the rules used to express policies in three cases, and in the other the fact that XACML appears to have nearly adequate expressiveness without
undue complexity. Each example is expressed first informally, by describing a service which could concievably be provided in a web services architecture, then the example is also outlined using either XACML, first order logic or both.

Statistics for USQ ePrint 20257
Statistics for this ePrint Item
Item Type: Conference or Workshop Item (Commonwealth Reporting Category E) (Paper)
Refereed: Yes
Item Status: Live Archive
Additional Information: Accepted version deposited in accordance with the copyright policy of the publisher.
Faculty / Department / School: Historic - Faculty of Sciences - Department of Maths and Computing
Date Deposited: 03 Feb 2012 05:21
Last Modified: 12 Aug 2014 03:35
Uncontrolled Keywords: web-services; web-security; XACML; computational complexity; security architecture
Fields of Research : 08 Information and Computing Sciences > 0806 Information Systems > 080612 Interorganisational Information Systems and Web Services
08 Information and Computing Sciences > 0805 Distributed Computing > 080505 Web Technologies (excl. Web Search)
08 Information and Computing Sciences > 0803 Computer Software > 080303 Computer System Security
Socio-Economic Objective: B Economic Development > 89 Information and Communication Services > 8903 Information Services > 890399 Information Services not elsewhere classified
Identification Number or DOI: 10.1109/ICDKE.2011.6053929

Actions (login required)

View Item Archive Repository Staff Only