Technical Report No . 502 Rev . 1 . 0 Symbolic and Cryptographic Analysis of the Secure WS - ReliableMessaging Scenario ( Extended Version ) ?
نویسندگان
چکیده
Web services are an important series of industry standards for adding semantics to web-based and XML-based communication, in particular among enterprises. Like the entire series, the security standards and proposals are highly modular. Combinations of several standards are put together for testing as interoperability scenarios, and these scenarios are likely to evolve into industry best practices. In the terminology of security research, the interoperability scenarios correspond to security protocols. Hence, it is desirable to analyze them for security. In this paper, we analyze the security of the new Secure WS-ReliableMessaging Scenario, the first scenario to combine security elements with elements of another quality-of-service standard. We do this both symbolically and cryptographically. The results of both analyses are positive. The discussion of actual cryptographic primitives of web services security is a novelty of independent interest in this paper.
منابع مشابه
No . 502 Rev . 1 . 0 Symbolic and Cryptographic Analysis of the Secure WS - ReliableMessaging Scenario ( Extended Version ) ?
Web services are an important series of industry standards for adding semantics to web-based and XML-based communication, in particular among enterprises. Like the entire series, the security standards and proposals are highly modular. Combinations of several standards are put together for testing as interoperability scenarios, and these scenarios are likely to evolve into industry best practic...
متن کاملSymbolic and Cryptographic Analysis of the Secure WS-ReliableMessaging Scenario
Web services are an important series of industry standards for adding semantics to web-based and XML-based communication, in particular among enterprises. Like the entire series, the security standards and proposals are highly modular. Combinations of several standards are put together for testing as interoperability scenarios, and these scenarios are likely to evolve into industry best practic...
متن کاملInteroperability and Functionality of WS-* Implementations
Recently, the Web Services Interoperability Organization (WS-I) has announced to have completed its interoperability standards work. The latest deliverables include the so-called “Basic Security Profile” and the “Reliable Secure Profile”. This gives rise to the question whether or not Web Services adopters can rely on interoperability and functionality of Web Services stacks, in particular in t...
متن کاملImproving Service Availability without Improving Availability of Individual Services
This paper presents a novel architectural solution for improving dependability of Web Services. This approach is based on the concepts from the emerging resilienceexplicit computing combined with the traditional fault-tolerance techniques such as recovery blocks and N-version programming applied in the context of the serviceoriented architecture. We propose a distributed solution called WS-Medi...
متن کاملA Feature - Complete Petri Net Semantics for WS - BPEL 2 . 0 and its Compiler BPEL 2 oWFN ?
We present an extension of a Petri net semantics for the Web Service Business Execution Language (WS-BPEL). This extension covers the novel activities and constructs introduced by the recent WS-BPEL 2.0 specification. Furthermore, we simplify several aspects of the Petri net semantics to allow for more compact models suited for computer-aided verification. This technical report is the extended ...
متن کامل