Dissertation > Excellent graduate degree dissertation topics show

The Research on Security Policy of Service Oriented Computing

Author: LiuGuangZuo
Tutor: ZhangYongSheng
School: Shandong Normal University
Course: Applied Computer Technology
Keywords: Services Computing Service - oriented architecture Access Control Role stratification Semantic Web Services Noumenon
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 125
Quote: 0
Read: Download Dissertation

Abstract

Service-oriented computing is a current topic of concern of the industry and academia, but also future trends. It advocates a development model based constructor application services and combinations thereof, standardized, loosely coupled and transparent application of the integrated approach is important, these features help to improve the interoperability of applications, agility and integration capabilities. Service computing is the computing model based on service-oriented architecture, service-oriented architecture, the application of different functional units is divided into service, linked through well-defined interfaces and contracts between these services, which makes the building in this system in the service can interact with a unified and common, and can support enterprise agility and state-of-the-art on-demand software outsourcing management mode. Service-oriented computing is based on a standard way to support the openness of the system, and thus make the technology and the system has a long-term vitality. With the development of service-oriented architecture technology, service-oriented computing security has become an important issue. Security and open nature of the opposition, the limited degree of security can be realized, and how to establish a reasonable balance between accessibility and access restrictions is an urgent need to study the problem of the security policy of the service-oriented computing. ? With the development of service-oriented architecture, distributed computing, access control is also proposed new requirements. Access control is one of the most important security technology, but also one of the main indicators of the Trusted Computer System Evaluation Criteria (TESEC) in the evaluation of system security. Compared with the traditional distributed systems, service-oriented architecture of distributed systems, heterogeneous computing environment and the diversity of the principal mode of operation, requesting the subject and object of the service resources have a higher dynamic characteristics . This requires access control mechanism should be able to dynamically adapt to these changes, according to the security environment to make access control decisions. ? Main work of this article: the security needs of service-oriented computing analysis, combined with access control technology trends, role-based access control, team-based access control and task-based access control, detailed study, summarizes and analyzes the advantages and disadvantages of each model and its limitations. ? 2. Emphasis on the existing service oriented access control study proposed a new access control model (RH-SOCAC) a service-oriented computing. The model the interaction between services as both equally serve in a process of application system, rather than directly call and be called. Introduced in the model the hierarchical concept of the role given to the role of different levels of service through the authentication mechanism, as parameter binding context, provides support for fine-grained policy implementation, simplified management, enhanced system understandability, and the model is applied to an example to illustrate. ? 4. Semantic Web services for service-oriented computing security. Described by ontology-based Web services security policy, security service computing semantic description, which can provide the reasoning in the semantic level security, also in line with the trend of the development of the Semantic Web, not only the network-oriented services, and can make the service a machine understandable semantics. ? 5 through the analysis of a service-oriented environment in the body play a positive role in terms of security, the security body to achieve a representation of the security requirements and security capabilities, Web services and agent access control, data integrity, authorization and security descriptor. Expansion and security body, add a strategy note in the security body, making better flexibility, diversity, and interoperability in the description of the security needs of the Semantic Web Services. ?

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile