Employing Web Services between Domains with Restricted Information Flows

摘要

Web services technology is becoming more widespread for military use, in addition to being common in civilian systems. This technology is defined by a number of standards, each addressing a different aspect of communication, integration and interoperability. This makes Web services highly suited for integrating civil and military systems. In a civil-military scenario, there are strict demands for security and control of information flow between systems. Web services support application level security, and in the long term, security in Web services based systems should be provided using these standards. However, current security policies often demand the use of other, existing security measures, such as the use of a so-called diode. A diode is placed between networks or domains, and ensures that information can only flow one way between these networks, for example from a civil network to a military network domain. In this paper, we investigate the use of Web services technology in networks where a data diode is in use.