Web application security gateway with java non-blocking IO

Authors:
Zhenxing Luo;Nuermaimaiti Heilili;Dawei XU;Chen Zhao;Zuoquan Lin
Affiliations:
LMAM, Department of Information Science, Peking University, Beijing, China;LMAM, Department of Information Science, Peking University, Beijing, China;LMAM, Department of Information Science, Peking University, Beijing, China;LMAM, Department of Information Science, Peking University, Beijing, China;LMAM, Department of Information Science, Peking University, Beijing, China
Venue:
NGITS'06 Proceedings of the 6th international conference on Next Generation Information Technologies and Systems
Year:
2006

Citing 8
Cited 0

Role-Based Access Control Models

Computer
SPREAD: scalable platform for reliable and efficient automated distribution

Proceedings of the 9th international World Wide Web conference on Computer networks : the international journal of computer and telecommunications netowrking
Configuring role-based access control to enforce mandatory and discretionary access control policies

ACM Transactions on Information and System Security (TISSEC)
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
Secure Cookies on the Web

IEEE Internet Computing
A Model for Attribute-Based User-Role Assignment

ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
Evaluating the Scalability of Java Event-Driven Web Servers

ICPP '04 Proceedings of the 2004 International Conference on Parallel Processing
Integrative security management for web-based enterprise applications

WAIM'05 Proceedings of the 6th international conference on Advances in Web-Age Information Management

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present the design and implementation of the WebDaemon Security Gateway (WDSG) with the techniques of event-driving, non-blocking IO multiplexing, secure cookies, SSL and caches based on PKI framework and role-based access control (RBAC) policy. It not only supports massive concurrency and avoids the pitfalls of traditional block I/O based design, but also is able to secure all the resources of an enterprise and reduce the cost and complexity of administration.