首页> 外文会议>International Symposium on Component-Based Software Engineering(CBSE 2005); 20050514-15; St.Louis, MO(US) >Experience Report: Design and Implementation of a Component-Based Protection Architecture for ASP.NET Web Services
【24h】

Experience Report: Design and Implementation of a Component-Based Protection Architecture for ASP.NET Web Services

机译:体验报告:ASP.NET Web服务的基于组件的保护体系结构的设计和实现

获取原文
获取原文并翻译 | 示例

摘要

This report reflects, from a software engineering perspective, on the experience of designing and implementing protection mechanisms for ASP.NET Web services. The limitations of Microsoft ASP.NET container security mechanisms render them inadequate for hosting enterprise-scale applications that have to be protected according to diverse and/or complex application-specific security policies. In this paper we report on our experience of designing and implementing a component-based architecture for protecting enterprise-grade Web service applications hosted by ASP.NET. Due to its flexibility and extensibility, this architecture enables the integration of ASP.NET into the organizational security infrastructure with less effort by Web service developers. The architecture has been implemented in a real-world security solution. This paper also contributes a best practice on constructing flexible and extensible authentication and authorization logic for Web services by using Resource Access Decision and Attribute Function (AF) architectural styles. Furthermore, the lessons learned from our design and implementation experiences are discussed throughout the paper.
机译:该报告从软件工程的角度反映了设计和实现ASP.NET Web服务保护机制的经验。 Microsoft ASP.NET容器安全性机制的局限性使其不足以承载必须根据各种和/或复杂的特定于应用程序的安全性策略进行保护的企业级应用程序。在本文中,我们报告了我们在设计和实现基于组件的体系结构以保护ASP.NET托管的企业级Web服务应用程序方面的经验。由于其灵活性和可扩展性,此体系结构使ASP.NET可以轻松集成到组织安全性基础结构中,而无需Web服务开发人员的努力。该架构已在实际的安全解决方案中实现。本文还通过使用资源访问决策和属性功能(AF)体系结构样式,为构建Web服务的灵活和可扩展的身份验证和授权逻辑提供了最佳实践。此外,本文还将讨论从我们的设计和实施经验中学到的经验教训。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号