An XML-based approach to combine firewalls and Web services security specifications

Marco Cremonini; Ernesto Damiani; Sabrina De Capitani Di Vimercati; Pierangela Samarati

doi:10.1145/968559.968571

An XML-based approach to combine firewalls and Web services security specifications

Marco Cremonini, Ernesto Damiani, Sabrina De Capitani Di Vimercati, Pierangela Samarati

Electrical Engineering

Università degli Studi di Milano

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

12 Scopus citations

Abstract

The Web Services Architecture (WSA) defines a comprehensive model for service-oriented interactions among end-points over a private network or the Internet. Since the many opportunities for better interacting services and the provision of richer functionality, crossing the boundary of organizations many standard proposals addressing different aspects of such interaction model are appearing. In this paper, we analyze the security requirements of the WSA and observe that the security model currently developed is not sufficient. In particular, we claim that many aspects related to network security and the integration of firewalls into the WSA have been underestimated. We show with different examples the usefulness of a semantics-aware firewall operating both at SOAP level and at lower network-based layers. We analyze, under this perspective, the impact on security that recently proposed stateful SOAP-based protocols could have, and describe how asynchronous protocols could pose high security risks on both service providers and service requesters. This drives us to the conclusion that, if security is an enabling factor for the success of Web service technologies, then perimetral security and firewall technology should be both fully supported into the WSA and improved to satisfy the requirements of the service-oriented interaction.

Original language	British English
Title of host publication	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)
Publisher	Association for Computing Machinery (ACM)
Pages	69-78
Number of pages	10
ISBN (Print)	158113777X, 9781581137774
DOIs	https://doi.org/10.1145/968559.968571
State	Published - 2003
Event	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) - Fairfax, VA, United States Duration: 31 Oct 2003 → 31 Oct 2003

Publication series

Name	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

Conference

Conference	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)
Country/Territory	United States
City	Fairfax, VA
Period	31/10/03 → 31/10/03

Keywords

Firewall
Network security
Service security
SOAP
Web services

Access to Document

10.1145/968559.968571

Cite this

Cremonini, M., Damiani, E., Di Vimercati, S. D. C., & Samarati, P. (2003). An XML-based approach to combine firewalls and Web services security specifications. In Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) (pp. 69-78). (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)). Association for Computing Machinery (ACM). https://doi.org/10.1145/968559.968571

Cremonini, Marco ; Damiani, Ernesto ; Di Vimercati, Sabrina De Capitani et al. / An XML-based approach to combine firewalls and Web services security specifications. Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery (ACM), 2003. pp. 69-78 (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)).

@inproceedings{b190f3370d96446696fa10a7f9bbb5a4,

title = "An XML-based approach to combine firewalls and Web services security specifications",

abstract = "The Web Services Architecture (WSA) defines a comprehensive model for service-oriented interactions among end-points over a private network or the Internet. Since the many opportunities for better interacting services and the provision of richer functionality, crossing the boundary of organizations many standard proposals addressing different aspects of such interaction model are appearing. In this paper, we analyze the security requirements of the WSA and observe that the security model currently developed is not sufficient. In particular, we claim that many aspects related to network security and the integration of firewalls into the WSA have been underestimated. We show with different examples the usefulness of a semantics-aware firewall operating both at SOAP level and at lower network-based layers. We analyze, under this perspective, the impact on security that recently proposed stateful SOAP-based protocols could have, and describe how asynchronous protocols could pose high security risks on both service providers and service requesters. This drives us to the conclusion that, if security is an enabling factor for the success of Web service technologies, then perimetral security and firewall technology should be both fully supported into the WSA and improved to satisfy the requirements of the service-oriented interaction.",

keywords = "Firewall, Network security, Service security, SOAP, Web services",

author = "Marco Cremonini and Ernesto Damiani and {Di Vimercati}, {Sabrina De Capitani} and Pierangela Samarati",

year = "2003",

doi = "10.1145/968559.968571",

language = "British English",

isbn = "158113777X",

series = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)",

publisher = "Association for Computing Machinery (ACM)",

pages = "69--78",

booktitle = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)",

address = "United States",

note = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) ; Conference date: 31-10-2003 Through 31-10-2003",

}

Cremonini, M, Damiani, E, Di Vimercati, SDC & Samarati, P 2003, An XML-based approach to combine firewalls and Web services security specifications. in Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security), Association for Computing Machinery (ACM), pp. 69-78, Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security), Fairfax, VA, United States, 31/10/03. https://doi.org/10.1145/968559.968571

An XML-based approach to combine firewalls and Web services security specifications. / Cremonini, Marco; Damiani, Ernesto; Di Vimercati, Sabrina De Capitani et al.
Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery (ACM), 2003. p. 69-78 (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - An XML-based approach to combine firewalls and Web services security specifications

AU - Cremonini, Marco

AU - Damiani, Ernesto

AU - Di Vimercati, Sabrina De Capitani

AU - Samarati, Pierangela

PY - 2003

Y1 - 2003

N2 - The Web Services Architecture (WSA) defines a comprehensive model for service-oriented interactions among end-points over a private network or the Internet. Since the many opportunities for better interacting services and the provision of richer functionality, crossing the boundary of organizations many standard proposals addressing different aspects of such interaction model are appearing. In this paper, we analyze the security requirements of the WSA and observe that the security model currently developed is not sufficient. In particular, we claim that many aspects related to network security and the integration of firewalls into the WSA have been underestimated. We show with different examples the usefulness of a semantics-aware firewall operating both at SOAP level and at lower network-based layers. We analyze, under this perspective, the impact on security that recently proposed stateful SOAP-based protocols could have, and describe how asynchronous protocols could pose high security risks on both service providers and service requesters. This drives us to the conclusion that, if security is an enabling factor for the success of Web service technologies, then perimetral security and firewall technology should be both fully supported into the WSA and improved to satisfy the requirements of the service-oriented interaction.

AB - The Web Services Architecture (WSA) defines a comprehensive model for service-oriented interactions among end-points over a private network or the Internet. Since the many opportunities for better interacting services and the provision of richer functionality, crossing the boundary of organizations many standard proposals addressing different aspects of such interaction model are appearing. In this paper, we analyze the security requirements of the WSA and observe that the security model currently developed is not sufficient. In particular, we claim that many aspects related to network security and the integration of firewalls into the WSA have been underestimated. We show with different examples the usefulness of a semantics-aware firewall operating both at SOAP level and at lower network-based layers. We analyze, under this perspective, the impact on security that recently proposed stateful SOAP-based protocols could have, and describe how asynchronous protocols could pose high security risks on both service providers and service requesters. This drives us to the conclusion that, if security is an enabling factor for the success of Web service technologies, then perimetral security and firewall technology should be both fully supported into the WSA and improved to satisfy the requirements of the service-oriented interaction.

KW - Firewall

KW - Network security

KW - Service security

KW - SOAP

KW - Web services

UR - http://www.scopus.com/inward/record.url?scp=3543129528&partnerID=8YFLogxK

U2 - 10.1145/968559.968571

DO - 10.1145/968559.968571

M3 - Conference contribution

AN - SCOPUS:3543129528

SN - 158113777X

SN - 9781581137774

T3 - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

SP - 69

EP - 78

BT - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

PB - Association for Computing Machinery (ACM)

T2 - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

Y2 - 31 October 2003 through 31 October 2003

ER -

Cremonini M, Damiani E, Di Vimercati SDC, Samarati P. An XML-based approach to combine firewalls and Web services security specifications. In Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery (ACM). 2003. p. 69-78. (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)). doi: 10.1145/968559.968571

An XML-based approach to combine firewalls and Web services security specifications

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this