A Solution to Change Security Policies on-the-fly
Ricardo Ferraz Tomaz, M. Mehdi, Ben Hmida, Valérie Monfort · 2006
ABSTRACT. Although Web Services are not the only way to design the Service paradigm, they are likely to be one of the major technologies used to achieve both the interoperability and loose coupling required for Service Oriented Architecture (SOA). However, there is still much to be done in order to get a genuinely flawless Web Service. Our research work consists on finding new service based solutions to increase flexibility and adaptability to SOAbased applications. In this paper we introduce an engine named Aspect Service Weaver (ASW) that enables to weave and un-weave new behavior (such as security) to a SOAbased application at runtime. We explain our approach through a concrete scenario where we replace an existing Kerberos policy for a Digital Certificate policy. 1.