Optimized web services security performance with differential parsing

  • Authors:
  • Masayoshi Teraguchi;Satoshi Makino;Ken Ueno;Hyen-Vui Chung

  • Affiliations:
  • Tokyo Research Laboratory, IBM Research, Kanagawa-ken, Japan;Tokyo Research Laboratory, IBM Research, Kanagawa-ken, Japan;Tokyo Research Laboratory, IBM Research, Kanagawa-ken, Japan;IBM Software Group, Austin, TX

  • Venue:
  • ICSOC'06 Proceedings of the 4th international conference on Service-Oriented Computing
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The focus of this paper is to exploit a differential technique based on the similarities among the byte sequences of the processed SOAP messages in order to improve the performance of the XML processing in the Web Service Security (WS-Security) processing. The WS-Security standard is a comprehensive and complex specification, and requires extensive XML processing that is one of the biggest overheads in WS-Security processing. This paper represents a novel WS-Security processing architecture with differential parsing. The architecture divides the byte sequence of a SOAP message into the parts according to the XML syntax of the message and stores them in an automaton efficiently in order to skip unnecessary XML processing. The architecture also provides a complete WS-Security data model so that we can support practical and complex scenarios. A performance study shows that our new architecture can reduce memory usage and improve performance of the XML processing in the WS-Security processing when the asymmetric signature and encryption algorithms are used.