Title :
Improving Web Service Security and Privacy
Author :
Ye, Xinfeng ; Zhong, Lei
Author_Institution :
Dept. of Comput. Sci., Auckland Univ., Auckland, New Zealand
Abstract :
This paper proposes a scheme that allows the webservice providers to carry out fine-grained access control onthe data hosted by them. Through data tracking, the schemealso automatically detects the data flows that might lead toattacks on online services. Compared with existing schemes,the proposed scheme is more flexible in managing the data onthe service provider. The scheme relieves the programmersfrom enforcing access control and detecting data flow violationin their applications.
Keywords :
Web services; authorisation; data privacy; Web service privacy; Web service security; fine-grained access control; online services; service provider; Access control; Databases; Filtering; Servers; Simple object access protocol; privacy; security;
Conference_Titel :
Services (SERVICES), 2011 IEEE World Congress on
Conference_Location :
Washington, DC
Print_ISBN :
978-1-4577-0879-4
Electronic_ISBN :
978-0-7695-4461-8
DOI :
10.1109/SERVICES.2011.109
