鲜奶吧餐饮服务申请书.ppt

Security for Web Services and Service Oriented Architectures Bhavani Thuraisingham The University of Texas at Dallas February 18, 2011 鲜奶吧 2 Acknowledgement Professors Elisa Bertino and Lorenzo Martino; Purdue University for much of the information and charts on web services security standards and digital identity management bertino@ lmartino@ Others: Dr. Frederica Pacci; University of Milan for ideas obtianed when serving on her thesis committee on reserach in web services security Prof. I-Ling Yen and Wei-She; University of Texas at Dallas for collaboration on web services security and the delegation model Book by Thomas Erl on Service Oriented Architectures, Prentice Hall, 2005 3 Objective and Scope The objective of this course is to provide an overview of the significant developments in SOA and Web Services Security Standards as well as directions for future developments Current work on SOA security is focusing mainly on access control as well as confidentiality and integrity. Solutions proposed for systems to address intrusion detection, denial of service and infrastructure attacks, insider threat analysis including data mining techniques for security applications are beyond the scope of this course. 4 Outline SOA and Web services: Overview SOA and Web services security: Overview WS-Security and WS-* Security 5 Service Oriented Architecture (SOA) /wiki/Service-oriented_architecture Service Oriented Architecture (SOA) is an architectural style that guides all aspects of creating and using business processes, packaged as services, throughout their lifecycle, as well as defining and provisioning the IT infrastructure that allows different applications to exchange data and participate in business processes loosely coupled from the operating systems and programming languages underlying those applications SOA represents a model in which functionality is decomposed into distinct units (services), which can be distributed over a network and can be combined togethe