基于AoP的Web服务综合安全模型研究

摘要

This paper aims to solve the current global security problem of web services. Starting with the special properties of this problem＇s domain, we can abstract the problem of integrated web services security. Distinguished from concentrating on an aspect of security on web services among similar researches, and drawing from the global definition of security problem, this paper analyzes three aspects involved with web services security and successfully proposes a web services integrated security model with transport security, access and control, and security auditing.%立足于解决当前Web服务的全局安全性问题。从问题域的特殊性质入手，抽象出Web服务综合安全问题。区别于同类研究中多数集中于安全性问题的某一方面，从安全性问题的全局定义入手，对web服务所涉及的传输安全、访问控制和安全审核三个安全对象进行了分析研究，提出了集传输安全、访问控制和安全事件审核为一体的Web服务综合安全模型．