A Study on Information Security for Web Services

碩士 === 國立交通大學 === 資訊管理學程碩士班 === 91 === Taiwan’s economy faces increased global competition. Our industries must evolve from manufacturing to services driven by knowledge-based integration. Information frameworks must be redeveloped in the same manner. If an enterprise doesn’t value inform...

Full description

Bibliographic Details
Main Authors: Kuei-Lan Chiu, 邱桂蘭
Other Authors: Jing-Jang Hwang
Format: Others
Language:zh-TW
Published: 2003
Online Access:http://ndltd.ncl.edu.tw/handle/11226444706833796409
Description
Summary:碩士 === 國立交通大學 === 資訊管理學程碩士班 === 91 === Taiwan’s economy faces increased global competition. Our industries must evolve from manufacturing to services driven by knowledge-based integration. Information frameworks must be redeveloped in the same manner. If an enterprise doesn’t value information integration then they are only able to solve narrow problems. One of the obstacles to services-oriented e-commerce was developed to share information. XML (eXtensible Markup Language) has evolved as the standard way to share data over the Internet. Web services technologies are based upon XML. Web services are the result of combining SOAP (Simple Object Access Protocol), WSDL (Web Services Description Language), and UDDI (Universal Description, Discovery and Integration) to create a foundation for e-commerce. Web services technology is based on the interoperation of many different software applications running on a variety of dispersed systems in a complex, multi-domain environment via the internet. During my research, I discovered that Web services in Taiwan are not mature. A key benefit of the emerging Web services architecture is the ability to deliver integrated, interoperable solutions. Beyond the previous foundation of protocols, security is a key consideration for Web services. Security is not only a prime requirement of e-commerce implementation, but also an important concern due to the fact that Web Services can penetrate through firewalls. A strategy for implementing Web Services can use pre-existing security infrastructure. Web services require an infrastructure to support authentication, authorization, confidentiality, integrity, and non-repudiation.