Web Service Security in Enterprise Information Systems
Ling Xu · Communications technology · 2011
The enterprise information system nowadays is largely domain-cross and Internet-cross,and is constructed with unprecedented complexity.Meanwhile the confidentiality of enterprise data requires the business process to be more secure than before.However,there exists no official standard and specification for SOA-architected information systems.Based on investigation of security technologies for Web services such as transport layer security,SOAP security,digital signature and assertions under enterprise environments,and with J2EE-architected enterprise environment as an example,a method in combining enterprise security services together with application/transport level security measures,for assuring enterprise information security and the method is proved applicable.