文献类型：期刊文献

中文题名：基于GMF的WS-Security安全策略配置工具研究与实现

英文题名：RESEARCH AND IMPLEMENTATION OF SECURITY POLICY CONFIGURATION TOOLS OF WS-Security BASED ON GMF

作者：李莹莹[1];金志超[1];阮彤[1];王舒扬[1]

机构：[1]华东理工大学计算机工程系,上海200237

年份：2012

卷号：29

期号：2

起止页码：101

中文期刊名：计算机应用与软件

外文期刊名：Computer Applications and Software

收录：CSTPCD;;北大核心:【北大核心2011】；CSCD:【CSCD_E2011_2012】；

基金："十一五"国家科技支撑计划重点项目(2009BAH46B03);2009年度上海市高新技术产业化重大项目计划(万达面向电子政务领域的应急管理V4.0产品研发和产业化)

语种：中文

中文关键词：Web;Service;WS-Security;协同安全;安全配置工具

外文关键词：Web service WS-Security Collaborative security Security configuration tool

摘要：现有的基于WS-Security(Web服务安全)的安全工具在技术层面上提供了Web服务安全的基础设施,但是这些工具需要用户拥有丰富的安全知识,并且没有提供展现业务上下文的手段,给业务用户对安全设施的使用带来了困难。基于MDA的思想设计了一个与业务流程结合的安全策略模型。在这个安全模型中,将描述业务流程的应用模型和描述协同应用安全信息的安全模型结合起来,并基于安全模型使用GMF框架实现了相应的配置工具。业务人员可以在可视化的业务流程之上,基于预定义的安全策略模型,配置Web服务安全策略。工具自动将配置的安全策略转换为WS-Security Policy规范文档。
Current WS-Security-based security tools provide infrastructures of Web Service Security technically.However,these tools require rich security knowledge possessed by the users and do not equip the means of representing business context so that they cause difficulties for business users in their use of security infrastructures.In this paper we design based on MDA idea a security policy model which combines with business process.In this security model the application model describing business process is combined with the security model describing collaborative applied security information.And based on the security model we implement corresponding configuration tools using GMF frame.Business users can configure Web Service security policy based on predefined security policy model within a visual business process,and the tools can convert the security policies configured to WS-Security Policy normative documents.