Ecole d'ingénieur et centre de recherche en Sciences du numérique

Enabling message security for RESTful services

Serme, Gabriel; De Oliveira, Anderson Santana; Massiera, Julien, Roudier, Yves

ICWS 2012, 19th IEEE International Conference on Web Services, June 24-29, 2012, Honolulu, Hawaii, USA

The security and dependability of cloud applications require strong confidence in the communication protocol used to access web resources. The mainstream service providers nowadays are shifting to REST-based services in the detriment of SOAP-based ones. REST proposes a lightweight approach to consume resources with no specific encapsulation, thus lacking of meta-data descriptions for security requirements. Currently, the security of RESTful services relies on ad-hoc security mechanisms (whose implementation is error-prone) or on the transport layer security (offering poor flexibility). We introduce the REST security protocol to provide secure service communication, together with its performance analysis when compared to equivalent WS-Security configuration.

Document Doi Bibtex

Titre:Enabling message security for RESTful services
Mots Clés:REST, Performance, Message Security, Protocol
Département:Sécurité numérique
Eurecom ref:3739
Copyright: © 2012 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Bibtex: @inproceedings{EURECOM+3739, doi = {}, year = {2012}, title = {{E}nabling message security for {REST}ful services}, author = {{S}erme, {G}abriel and {D}e {O}liveira, {A}nderson {S}antana and {M}assiera, {J}ulien, {R}oudier, {Y}ves}, booktitle = {{ICWS} 2012, 19th {IEEE} {I}nternational {C}onference on {W}eb {S}ervices, {J}une 24-29, 2012, {H}onolulu, {H}awaii, {USA} }, address = {{H}onolulu, {\'{E}}{TATS}-{UNIS}}, month = {06}, url = {} }
Voir aussi: