基于WS-Security的web服务安全性探讨

On web service application security based on WS-Security

传输级安全机制只能保证Web服务点到点的安全通信,但消息级安全机制能够提供Web服务端到端安全保证.文章在分析Web服务安全因素的基础上,结合WS-Security规范构建了一个基于WS-Security的web服务安全设计的原形,并对其安全性进行了分析.

Transport-level security for web services only provides point-to-point secure guarantee, while message-level security can provide end-to-end secure guarantee. The security ingredients of web services are introduced. According to WS-security specifications, an example basedon WS-Security is constructed. At the same time its security problems are analyzed.