While security of cross-domain single sign-on is a thoroughly researched subject, the closely related web identity federation has not been recognized as a distinct problem requiring analysis in its own right. In this paper, we describe a generic approach for analyzing security of web protocols through a framework for reasoning about user actions. We then use this framework to analyze security o...

This paper presents a SOAP request scheduling algorithm for differentiated quality of service. The scheduling algorithm can be deployed on a Web services server or any server that processes SOAP requests. Due to the resource-intensive security processing of SOAP messages, this research implements the scheduling algorithm on a QoS security server. The security server schedules the requests forwa...

Secure web information systems are becoming increasingly important due to rising cybercrime as well as the growing awareness of data privacy. Besides authentication and confidential connections, both data access control and navigational access control are the most relevant security features in this field. Adding such security features, however, to already implemented web applications is an erro...

Web services security has some crucial problems to be solved in building Grid applications. In particular the current implementations of message-level Web services security are very slow and therefore extremely vulnerable to even the simplest types of Denial of Service (DoS) attacks. The more advanced is the security mechanisms, the worse the performance and scalability of the whole system. On ...

A known weakness of Web Services is their vulnerability to Denial of Service attacks exploiting XML processing characteristics. To protect Web Services from these attacks, extended validation of SOAP messages—considering WS-Security and WS-SecurityPolicy—is made. For SOAP security is message oriented, the processing of the security content itself is vulnerable to Denial of Service attacks. Henc...

Security in WEB applications has become a major concern for the scientific and business communities today. An increasing amount of money is being spent for handling information security. . Therefore, giving the proper importance of handling information security, the paper focuses on: definitions of software security, vulnerabilities and risks, dealing with various threats and vulnerabilities, t...

filtering of web pages with inappropriate contents is one of the major issues in the field of intelligent network's security. having a good intelligent filtering method with high accuracy and speed is needed for any country in order to control users' access to the web. so, it has been considered by many researchers. presenting web pages in an understandable way by machines is one of the most im...

Due to the increasing complexity of web systems, security testing has become indispensable and critical activity of web application development life cycle. Security testing aims to maintain the confidentiality of the data, to check against any information leakage and to maintain the functionality as intended. It checks whether the security requirements are fulfilled by the web applications when...

................................................................................................................2 Scope and Limitations...........................................................................................4 Web Services Security Analysis versus Enterprise Security Criteria ....................5 1. Wired FEA Web Services Security and FEA, EA Enterprise Security Architecture:...

1389-1286/$ see front matter 2012 Published b http://dx.doi.org/10.1016/j.comnet.2012.10.010 ⇑ Tel.: +1 210 458 6081. E-mail address: [email protected] There appears to be consensus among seasoned cyber security researchers that there is substantial disconnect between the research community’s priorities and the real world— notwithstanding numerous intellectual advances in the theory and prac...