Description: |
Web services are programmatically accessible applications published on the Web. Mainly intended for use between enterprises, research in Web services is fuelled by its promise to increase interoperability between systems. Industry giants such as IBM, Microsoft, Sun, Oracle, and BEA are investing heavily in R&D to enable Web services to realize their potential. Currently, the biggest obstacle to widespread use of Web services between enterprises is the lack of de facto standards for security. In particular, authorization is challenging, as the environments are dynamic and volatile.
This project centres around the implementation of a trust negotiation framework for Web services. Trust negotiation is an approach to authorization that does not require the user (the service requester) to be known to the service provider before the interaction takes place. Instead of using identity to specify who may access the service, properties of the requesters are used in the authorization. Requesters prove these properties by using digital certificates.
We have an existing prototype that has been presented in an international conference of high reputation. Now, we would like build on this success by extending the software with exciting new ideas.
Solid experience in Java and/or C# programming is essential. Also, some knowledge of security and/or Web services is useful. For further information please contact the supervisor directly or Halvard Skosgrud (halvards@cse.unsw.edu.au) |
