Efficient Access Control for Service-oriented IT Infrastructures: Enabling Secure Distributed Service Compositions

Service-oriented architectures provide high levels of inter-operability and high means of adaptability. Nevertheless, distributed service-based business processes demand for robust, flexible and - bearing scalability in mind - efficient security mechanisms. This book presents access control models and procedures for intra- and inter-organizational service compositions. It introduces a framework for distributed access control in Web service federations and highlights optimizations through the consolidation of security policies and the caching of access control information. In combination, these concepts enable efficient and reliable access control for current and upcoming service-oriented architectures. As the presented techniques build up on prevalent security standards like WS-Security and XACML, application developers, system designers, and security experts will be able to seamlessly transfer them to their particular Web service-based projects.

Dr. Martin Wimmer: 2003 degree in computer science (Dipl.-Inf. Univ.) from the University of Passau, Germany; 2003-2004 research assistant at the University of Passau; 2004-2007 research assistant at the Technische Universität München (TUM); 2007 doctor''s degree (Dr. rer. nat.) from the TUM; since April 2007 consultant with Siemens CERT.