A New Quantitative Model for Web Service Security

摘要：

　　Security is one of important QoS properties of web services that need to be quantified.Quantifying Security can help both in selecting among published web services and also in assessing security weaknesses of services by service providers.In this paper we propose a three level hierarchical architecture for web service security.In this architecture we consider all of important aspects of security that they are: authentication,integrity,authorization,confidentiality,availability and nonrepudiation.For each aspect is considered the most important web service threats.Furthermore we consider likelihood and impact factor for each threat.Then we compute weight of each impact with using AHP and finally total security index is computed with weighted averaging.

关键词： component Security Web Service SOA Risk Analysis

作者: Omid Banaei Siavash Khorsandi

作者单位: Computer Engineering and Information Technology departmentAmirkabir University of Technology(Tehran Polytechnic)

会议类型: 国际会议

会议名称: 2012 IEEE 14th International Conference on Communication Technology(2012年第十四届通信技术国际会议(ICCT 2012))

会议地点: 成都

会议语种:英文

页码: 826-832

在线出版日期: 2012-11-09（万方平台首次上网日期，不代表论文的发表时间）