Rule-Based Security Capabilities Matching for Web Services

  • Authors:

  • Bo Yu;Lin Yang;Yongjun Wang;Bofeng Zhang;Yuan Cao;Linru Ma;Xiangyang Luo

  • Affiliations:

  • School of Computer, National University of Defense Technology, Changsha, China;Center for Security, Institute of China Electronic Equipment System Engineering, Beijing, China;School of Computer, National University of Defense Technology, Changsha, China;School of Computer, National University of Defense Technology, Changsha, China;School of Computer, National University of Defense Technology, Changsha, China;Center for Security, Institute of China Electronic Equipment System Engineering, Beijing, China;Zhengzhou Information Science and Technology Institute, Zhengzhou, China

  • Venue:
  • Wireless Personal Communications: An International Journal
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

A primary problem for security aware Web service discovery is how to discover security capabilities of Web services and how these security capabilities can be matched with security requirements of various requesters. Presently, most approaches are based on syntactic matching, which is prone to result in false negative because of lacking of semantics. In this paper, we propose a rule-based approach to decide whether security capabilities match security requirements. Based on a semantic model of security policy, security capabilities are inferred from security policy of Web services. General Web service security ontology is proposed to semantically model security requirements of various service requesters. The architecture of rule-based matching engine is also presented to describe the whole matching process. The prototype system and case study show that the proposed approach is flexible and feasible.