Middleware for Automated Implementation of Security Protocols

Authors:
Béla Genge;Piroska Haller
Affiliations:
Department of Electrical Engineering, "Petru Maior" University of Târgu Mureş, Târgu Mureş, Romania (540088);Department of Electrical Engineering, "Petru Maior" University of Târgu Mureş, Târgu Mureş, Romania (540088)
Venue:
ESWC 2009 Heraklion Proceedings of the 6th European Semantic Web Conference on The Semantic Web: Research and Applications
Year:
2009

Citing 6
Cited 0

Some new attacks upon security protocols

CSFW '96 Proceedings of the 9th IEEE workshop on Computer Security Foundations
Automatic Implementation System of Security Protocols Based on Formal Description Techniques

ISCC '02 Proceedings of the Seventh International Symposium on Computers and Communications (ISCC'02)
A Systematic Review and Comparison of Security Ontologies

ARES '08 Proceedings of the 2008 Third International Conference on Availability, Reliability and Security
Compositionality of Security Protocols: A Research Agenda

Electronic Notes in Theoretical Computer Science (ENTCS)
Security in the Semantic Web using OWL

Information Security Tech. Report
Security ontology for annotating resources

OTM'05 Proceedings of the 2005 OTM Confederated international conference on On the Move to Meaningful Internet Systems: CoopIS, COA, and ODBASE - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a middleware for automated implementation of security protocols for Web services. The proposed middleware consists of two main layers: the communication layer and the service layer. The communication layer is built on the SOAP layer and ensures the implementation of security and service protocols. The service layer provides the discovery of services and the authorization of client applications. In order to provide automated access to the platform services we propose a novel specification of security protocols, consisting of a sequential component, implemented as a WSDL-S specification, and an ontology component, implemented as an OWL specification. Specifications are generated using a set of rules, where information related to the implementation of properties such as cryptographic algorithms or key sizes, are provided by the user. The applicability of the proposed middleware is validated by implementing a video surveillance system.