Affiliation:
1. Distributed Systems Group, University of Bamberg, Germany
2. Senacor Technologies AG, Germany
Abstract
Recently, the Web Services Interoperability Organization (WS-I) has announced to have completed its interoperability standards work. The latest deliverables include the so-called “Basic Security Profile” and the “Reliable Secure Profile.” This gives rise to the question whether or not Web Services adopters can rely on interoperability and functionality of Web Services stacks, in particular in terms of security and reliability features. To answer this question, the authors thoroughly analyze two important Web Services stacks for interoperability of WS-Security and WS-ReliableMessaging features. Their analysis shows that security and reliability features are far from being implemented in an interoperable manner. Additionally, they reveal that some of those interoperability problems are not even covered by WS-I profiles and therefore conclude that WS-I’s work has not yet resulted in Web Services interoperability. Finally, the authors investigate support for the so-called “Secure WS-ReliableMessaging Scenario” in order to find out whether WS-* adopters can at least rely on the availability of real-world functionality in homogeneous environments.
Subject
Computer Networks and Communications,Information Systems,Software
Reference42 articles.
1. Backes, M., Mödersheim, S., Pfitzmann, B., & Vigano, L. (2006). Symbolic and cryptographic analysis of the secure WS-ReliableMessaging scenario. In L. Aceto & A. Ingólfsdóttir (Eds.), Proceedings of the Foundations of Software Science and Computational Structures (LNCS 3921, pp. 428-445).
2. Challenges of Testing Web Services and Security in SOA Implementations
3. BEA Systems, IBM Corporation, Microsoft Corporation Inc., & TIBCO Software Inc. (2005). Web services reliable messaging protocol (WS-ReliableMessaging), first specification (Version 1.0). Retrieved from http://download.boulder.ibm.com/ibmdl/pub/software/dw/specs/ws-rm/ws-reliablemessaging200502.pdf
4. Bertolino, A., Angelis, G. D., & Polini, A. (2007, July). A QoS test-bed generator for web services. In L. Baresi, P. Fraternali, & G.-J. Houben (Eds.), Proceedings of the 7th International Conference on Web Engineering, Como, Italy (LNCS 4607, pp. 17-31).
5. Bertolino, A., & Polini, A. (2005). The audition framework for testing Web services interoperability. In Proceedings of the 31st EUROMICRO Conference on Software Engineering and Advanced Applications (pp. 134-142).