CS 595G Winter 2006 home page

CS 595G - Web Services and Security - Winter 2006

Description:

Browser-based web accessible software systems have been extremely successful in electronic commerce, especially for business-to-consumer applications. However, the difficulty of integrating business processes across heterogeneous platforms has been a major hurdle in extending this success to business-to-business applications. The emerging Web services paradigm addresses this problem by providing a framework for integration and interoperability of web accessible software applications across boundaries of business entities. One of the important research questions in this new area is establishing security of Web services. In this seminar we will discuss new results and problems on Web services and security.

Instructors: Tevfik Bultan and Richard Kemmerer

Enrollment Code: 75739

Meeting Time and Place: Tuesdays at 1:00pm in the CS conference room (Eng. I 2124)

Presentations

Date, time, location: March 7, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
We will discuss the following paper:
Ken Birman, ``The Untrustworthy Web Services Revolution'' IEEE Computer, February 2006, Vol. 39, No. 2, pages 98-100.
Date, time, location: February 28, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Anders Smestad
Topic: WS-Security
Presentation Slides
Reading assignment:
- Web Services Security Roadmap
To learn more:
- WS-Security Standard
- Implementing WS-Security with Java and WSS4J
Date, time, location: February 21, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Zhongnan Shen
Topic: UDDI
Presentation Slides
Reading assignment:
- Introduction to UDDI
To learn more:
Date, time, location: February 14, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Vika Felmetsger
Topic: SAML
Presentation Slides
Reading assignment:
- SAML Technical Overview (Sections 1 to 3)
Date, time, location: February 7, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Matt Van Gundy
Topic: SOAP, WS-Security
Presentation Slides
Reading assignment:
- Introduction to SOAP 1.1
- Web Services Security Roadmap
To learn more:
Date, time, location: January 31, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Graham Hughes
Topic: XACML
Presentation Slides
Reading assignment
- Phil Griffin Introduction To XACML
XACML specification is available at:
- Hal Lockhart et al. eXtensible Access Control Markup Language (XACML)
Date, time, location: January 24, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Cagdas Gerede
Topic: BPEL
Presentation Slides
Reading assignment
- Matjaz Juric A Hands-on Introduction to BPEL
BPEL specification is available at:
- Tony Andrews et al. Business Process Execution Language (BPEL), Version 1.1
Date, time, location: January 17, Tuesday at 1:00pm in the CS conference room (Eng. I 2124)
Speaker: Marco Cova
Topic: WSDL
Presentation Slides
Reading assignments
- F. Curbera et al., ``Unraveling the Web Services Web. An Introduction to SOAP, WSDL, and UDDI'', IEEE Computer 2002,
- Erik Christensen et al. Web Services Description Language (WSDL) Version 1.1
To learn more:
- ibm.com/developerWorks, Describing Web services: WSDL (Section 2)
- C. C. Tapang, Web Services Description Language (WSDL) Explained, 2001,
Date, time, location: January 10, Tuesday at 2:00pm in the CS conference room (Eng. I 2124)
Speaker: Tevfik Bultan
Topic: An Overview of Web Service Standards
Presentation slides

Major Conferences Related to Web Services

International World Wide Web Conference (WWW) (2005, 2004, 2003).
IEEE International Conference on Web Services (ICWS) (2005, 2004, 2003).
International Conference on Service Oriented Computing (ICSOC) (2005, 2004, 2003).

Introductory Reading

Web services has been a popular topic in the technical magazines. All the issues listed below are on web services. The articles in these issues give a good overview of web service technologies and standards.

IEEE Computer, October 2003, Volume 36, Number 10.
Communications of the ACM, June 2003, Volume 46, Number 6.
Communications of the ACM, June 2003, Volume 46, Number 10.
ACM Queue, Volume 1, Number 1.

Web Service Standards

Erik Christensen et al. Web Services Description Language (WSDL) Version 1.1
Roberto Chinnici et al Web Services Description Language (WSDL) Version 2.0
Nilo Mitra et al. Simple Object Access Protocol (SOAP) Version 1.2
Tony Andrews et al. Business Process Execution Language (BPEL), Version 1.1
Luc Clement et al. Universal Description Discovery & Integration (UDDI) Version 3.0.2
Bob Atkinson et al. Web Services Security (WS-Security)
Hal Lockhart et al. eXtensible Access Control Markup Language (XACML)
P. Mishra et al. Security Assertion Markup Language (SAML)