Dissertation > Excellent graduate degree dissertation topics show
Research and Application of Web Service Security Model Based on RBAC
Author: TangYuFang
Tutor: ZhangYongSheng
School: Shandong Normal University
Course: Applied Computer Technology
Keywords: Web Services RBAC Access control policy SAML XACML
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 137
Quote: 0
Read: Download Dissertation
Abstract
|
With the development of Internet technology, Web services-based applications have become one of the important aspects of Internet development, now many Internet-related Web services standardization organizations have done a lot of theoretical research, IT companies have developed some Web services products. As with the Web service quality-related Web services security, Web services have become an important research direction. Thesis describes the Web services on the basis of relevant theories, for Web services security are discussed, especially for Web services security in the network security auditing, single sign-on and access control policy decisions on issues such as in-depth research, the do the job as well as innovative mainly includes the following aspects: 1. looked up with the Web services security-related domestic and foreign periodicals, documents and other information, expounded the basic concepts associated, introduced the latest research progress in this direction, analysis of the current Web services security problems and deficiencies. (2) introduction of Web services security protocol stack discussions and focuses on the security protocol stack two of the most representative specifications - WS-Security and WS-Federation specification core specification for the proposed RBAC-based Web services security model laid a theoretical foundation. 3 introduces a RBAC-related content, including RBAC concepts, ideas and characteristics, focusing on the RBAC / Web security model for in-depth discussion, analysis of the security model workflow and shortcomings. On this basis, we propose a Web service based on RBAC security model, security model explains the function of the composition and workflow, analysis of the features and benefits of the security model. 4 for Web services based on RBAC security model network security audit issues is proposed based on the IMD Web Proxy filtering model. In the current mainstream of filtering techniques are analyzed and compared after in the Windows NT environment experiment, introduced the filter driver workflow and development details, analyzes its Web services network security audit in the excellent performance . 5 for Web services based on RBAC security model of single sign-on problem, a SAML-based single sign-on for Web services model. Through SAML for research, especially on SAML communication, SAML SAML assertion conceptual model as well as the form of in-depth analysis, the model put forward to solve the user at each login credible cluster Web services site, authentication information must be submitted for authentication problems. With this model, a user using a trusted server in the cluster awarded by the Federal SAML assertion-based authentication token without repeated authentication information to log in to submit credible cluster Web services site. 6 for Web services based on RBAC security model access control policy decision problem is proposed based on XACML RBAC access control policy decision model, XACML RBAC is implemented through the minds of the principle of least privilege and separation of duties principles. Basic concepts on XACML, XACML conceptual model and XACML policy decision-making process conducted in-depth research, the paper presents the model, so that the federated server in the cluster can be trusted to Web services site to provide more fine-grained access control policy decisions services. 7 papers will be based on RBAC security model is applied to Web services Web services-based student information management system, given the application of the security model of the student information management system, the overall architecture, a detailed analysis of the security model in the student information management system to achieve the functions and workflow.
|
Related Dissertations
- Public service-oriented architecture -based information systems in the new rural information construction in applied research,TP393.09
- Ontology -based Semantic Web service matching and composition method,TP393.09
- A Design and Implementation of Single Sign-on System Based on the Improved RBAC Model and CAS,TP311.52
- The Research and Implementation of OA System Based on SOA and Workflow,TP311.52
- Design and Implementation on Data Exchange of Electronic Supervising System of Governmental Examining and Approval,TP311.52
- Research and Implementation of the Techniques of Embedded Network Video Applications,TP368.1
- Design and Implementation of a Test Generation System,TP311.52
- General System Design and Implementation of Rights,TP311.52
- Public security information system data integration,TP311.52
- Enterprise Service Bus Based Information Integration System for Die & Mold Enterprises,TP311.52
- Research on Checking and Digesting Policy Conflicts Under Multi-Policy Environments,TP393.08
- Research of Legacy System Integration Based on Web Services,TP393.09
- Research and Implementation of Web services , real - time , multi-platform ticketing system,TP393.09
- The Authorization Management System of the River Dike’s Management Information System Based on RBAC,TV871
- Research and Implementation of Automated Monitoring Information System for Soil-Water Conservation,TP311.52
- Small and medium sized logistics enterprises Distribution Management System Design and Implementation,TP311.52
- Traditional manufacturing software, Web-oriented promotion of key technologies,TP311.52
- Based on Web Service Online Examination Management System Research and Implementation,TP311.52
- Jiamusi University Data Center Management System Design and Implementation,TP311.52
- Distance Education System Design and Implementation,TP311.52
- Organizational structure driven migration framework of corporate privilege model,TP311.52
CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile
|