Thesis Topic Details

Topic ID:
41
Title:
Web Services Security Analysis and Management Tool.
Supervisor:
Boualem Benatallah
Research Area:
Services
Associated Staff
Assessor:
Helen Hye-Young Paik
Topic Details
Status:
Active
Type:
R & D
Programs:
CS CE BIOM BINF SE
Group Suitable:
Yes
Industrial:
Pre-requisites:
--
Description:
Web services are programmatically accessible applications published on the Web. Mainly intended for use between enterprises, research in Web services is fuelled by its promise to increase interoperability between systems. Industry giants such as IBM, Microsoft, Sun, Oracle, and BEA are investing heavily in R&D to enable Web services to realize their potential. Currently, the biggest obstacle to widespread use of Web services between enterprises is the lack of de facto standards for security. In particular, authorization is challenging, as the environments are dynamic and volatile.

This project centres around the implementation of a trust negotiation framework for Web services. Trust negotiation is an approach to authorization that does not require the user (the service requester) to be known to the service provider before the interaction takes place. Instead of using identity to specify who may access the service, properties of the requesters are used in the authorization. Requesters prove these properties by using digital certificates.

We have an existing prototype that has been presented in an international conference of high reputation. Now, we would like build on this success by extending the software with exciting new ideas.

Solid experience in Java and/or C# programming is essential. Also, some knowledge of security and/or Web services is useful. For further information please contact the supervisor directly or Halvard Skosgrud (halvards@cse.unsw.edu.au)
Comments:
--
Past Student Reports
  Surbhi SAH in s2, 2010
Web Services Security Analysis and Management Tool.
 

Download report from the CSE Thesis Report Library

NOTE: only current CSE students can login to view and select reports to download.