Journal article
On the Relationship Between Web Services Security and Traditional Protocols
- Abstract:
- XML and Web Services security specifications define elements to incorporate security tokens within a SOAP message. We propose a method for mapping such messages to an abstract syntax in the style of Dolev-Yao, and in particular Casper notation. We show that this translation preserves flaws and attacks. Therefore we provide a way for all the methods, and specifically Casper and FDR, that have been developed in the last decade by the theoretical community for the analysis of cryptographic protocols to be used for analysing WS-Security protocols. Finally, we demonstrate how this technique can be used to prove properties and discover attacks upon a proposed Microsoft WS-SecureConversation protocol. © 2006.
- Publication status:
- Published
- Peer review status:
- Peer reviewed
Actions
Access Document
- Files:
-
-
(Preview, Version of record, pdf, 395.5KB, Terms of use)
-
- Publisher copy:
- 10.1016/j.entcs.2005.11.074
Authors
- Publisher:
- Elsevier
- Journal:
- Electronic Notes in Theoretical Computer Science More from this journal
- Volume:
- 155
- Issue:
- 1 SPEC. ISS.
- Pages:
- 583-603
- Publication date:
- 2006-05-12
- DOI:
- ISSN:
-
1571-0661
- Language:
-
English
- Keywords:
- UUID:
-
uuid:8528f0a5-1885-4e8f-b2f4-330d09bfce5d
- Local pid:
-
pubs:284302
- Source identifiers:
-
284302
- Deposit date:
-
2013-02-20
Terms of use
- Copyright holder:
- Elsevier BV
- Copyright date:
- 2006
- Notes:
- © 2006 Elsevier B.V. All rights reserved. Re-use of this article is permitted in accordance with the Terms and Conditions set out at http://www.elsevier.com/open-access/userlicense/1.0/
If you are the owner of this record, you can report an update to it here: Report update to this record