A Policy-based adaptive web services security framework

作者：Li Bin^*; Zhao Lingjun; Zhu Junwu; Wu Jun

来源：Journal of Software, 2011, 6(12 SPEC. ISSUE): 2456-2463.

DOI：10.4304/jsw.6.12.2456-2463

• Adaptive web
• BDI Agent
• Context-awareness
• Declarative Languages
• JADE agent platforms
• Management mechanisms
• Policy concept
• Policy description language
• Policy-based framework
• Prototype system
• Reasoner
• Reasoning mechanism
• Security frameworks
• Service access
• Service oriented computing
• User context
• Web Service Security
• Web services security

Web services security has become a hot topic in the research of service oriented computing. This paper aims to study many pivotal technologies in the web services security. Firstly, a policy-based framework for adaptive web services security is proposed, with the policy concept, management mechanism and execution mechanism can be separated effectively, moreover, by management of user context and web services context, web services access control can adapt to the changed environment. Secondly, a policy description language called ReiT is given, ReiT is a declarative language based on the rules and ontology and can express the structural and non-structural knowledge. A mixed reasoning mechanism is proposed, the web service access control policy including the user context and web services context can be evaluated by the reasoner. Finally, a policy aware BDI agent to authorize the access control of the web services is presented, and a prototype system based on Java EE and Jade Agent platform is implemented, Simulation experimental results and an example demonstrate the security framework is feasible and effective.

• 出版日期2011