Decoupling Security Concerns in Web Services Using Aspects

  • Authors:
  • G. Kouadri Mostefaoui;Z. Maamar;N. C. Narendra;S. Sattanathan

  • Affiliations:
  • Fribourg University, Switzerland;Zayed University, U.A.E;IBM India Research Lab, India;National Institute of Technology, India

  • Venue:
  • ITNG '06 Proceedings of the Third International Conference on Information Technology: New Generations
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper discusses the Aspect-oriented Framework for Web services (AoF4WS) that supports on-demand context-sensitive security in Web services. Flexible security schemes are needed in many Web services applications where authentication, authorization, etc., can no longer be used in their current form. Security mechanisms are to be customized to the continuously changing requirements of Web services. Examples of this customization concern cryptographic protocol for a specific situation and timeout for user credentials. The AoF4WS uses aspect-oriented programming and frames. Aspects provide flexibility to the framework, and frames adjust aspects to specific requirements.