Symbolic and cryptographic analysis of the secure WS-ReliableMessaging scenario

DMCA

Symbolic and cryptographic analysis of the secure WS-ReliableMessaging scenario (2006)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Michael Backes , Sebastian Mödersheim , Birgit Pfitzmann , Luca Viganò

Venue:	In Foundations of Software Science and Computation Structures
Citations:	22 - 2 self

BibTeX

@INPROCEEDINGS{Backes06symbolicand,
    author = {Michael Backes and Sebastian Mödersheim and Birgit Pfitzmann and Luca Viganò},
    title = {Symbolic and cryptographic analysis of the secure WS-ReliableMessaging scenario},
    booktitle = {In Foundations of Software Science and Computation Structures},
    year = {2006},
    pages = {428--445},
    publisher = {Springer-Verlag}
}

OpenURL

Abstract

Abstract. Web services are an important series of industry standards for adding semantics to web-based and XML-based communication, in particular among enterprises. Like the entire series, the security standards and proposals are highly modular. Combinations of several standards are put together for testing as interoperability scenarios, and these scenarios are likely to evolve into industry best practices. In the terminology of security research, the interoperability scenarios correspond to security protocols. Hence, it is desirable to analyze them for security. In this paper, we analyze the security of the new Secure WS-ReliableMessaging Scenario, the first scenario to combine security elements with elements of another quality-of-service standard. We do this both symbolically and cryptographically. The results of both analyses are positive. The discussion of actual cryptographic primitives of web services security is a novelty of independent interest in this paper. 1

Keyphrases

secure ws-reliablemessaging scenario cryptographic analysis interoperability scenario industry standard web service security first scenario xml-based communication web service new secure ws-reliablemessaging scenario security standard important series security research security protocol independent interest several standard quality-of-service standard actual cryptographic primitive security element entire series

DMCA