Web Services安全架构及其防火墙技术的研究

Study about web services security architecture and firewall

介绍了IBM和Microsoft联合开发的Web服务安全规范(WS-Security),讨论了WebServices所面临的安全挑战,最终针对潜在的安全威胁给出了一个WebServices防火墙模型及其防火墙架构。该架构采用独特的Adapter设计,可以很方便的与现有的信息安全设施整合。

This paper simply introduces the web services security specification proposed by IBM and microsoR （WS-Security）, then describes the security challenges of web services, eventually presents a model for web services firewall and its architecture based on the potential security threaten. This architecture is designed uniquely by adapter pattern which makes it very convenient to integrate existing information security infrastructure.