Decoupling Security Concerns in Web Services Using Aspects

Author

Mostéfaoui, G. Kouadri ; Maamar, Z. ; Narendra, N.C. ; Sattanathan, S.

Author_Institution

Fribourg Univ.

fYear

2006

fDate

10-12 April 2006

Firstpage

20

Lastpage

27

Abstract

This paper discusses the aspect-oriented framework for Web services (AoF4WS) that supports on-demand context-sensitive security in Web services. Flexible security schemes are needed in many Web services applications where authentication, authorization, etc., can no longer be used in their current form. Security mechanisms are to be customized to the continuously changing requirements of Web services. Examples of this customization concern cryptographic protocol for a specific situation and timeout for user credentials. The AoF4WS uses aspect-oriented programming and frames. Aspects provide flexibility to the framework, and frames adjust aspects to specific requirements

Keywords

Internet; object-oriented programming; security of data; AoF4WS; Web services; aspect-oriented programming; context-sensitive security; decoupling security concerns; Authentication; Authorization; Context-aware services; Cryptographic protocols; Cryptography; National security; Scattering; Software systems; Standards development; Web services; Aspect-oriented programming; Framed aspect; Security; Web services.;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Technology: New Generations, 2006. ITNG 2006. Third International Conference on

Conference_Location

Las Vegas, NV

Print_ISBN

0-7695-2497-4

Type

conf

DOI

10.1109/ITNG.2006.47

Filename

1611565