Segurança para web services com criptografia heterogênea baseada em Proxy

• Ano de defesa: 2010
• Autor(a) principal: Souza, Samuel Camargo de
• Orientador(a): Zorzo, Avelino Francisco
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Pontifícia Universidade Católica do Rio Grande do Sul; Porto Alegre
• Palavras-chave em Português: INFORMÁTICA; SEGURANÇA DE REDES DE COMPUTADORES; SEGURANÇA DE DADOS; WEB SITES - MEDIDAS DE SEGURANÇA; SERVIDOR PROXY
• Link de acesso: http://hdl.handle.net/10923/1492

Currently, many different services are available through the Internet and there is a growing demand for these applications. Considering that the Internet is not secure, the confidentiality of such information is a factor of increasing importance. To overcome this problem, many security techniques have emerged and each company has adopted the policies in a different way, but with a tendency to adopt the model of Service-Oriented Architectures. Sometimes different services with different security policies need to be grouped to work together, which makes it difficult to create an application that follows this pattern. A new approach is needed to facilitate the coexistence of these techniques in a productive manner. Based on these requirements, this paper presents a model aimed at the automatic processing of security features to services ordered in Service Oriented Architectures, this model serves as an intermediate system able to “translate” the safety techniques for a particular format. Based on this model, it is presented a prototype able to automatically handle different asymmetric encryption algorithms, including RSA, DSA and ECDSA. This study is to demonstrate the effectiveness of the model through a case study, presenting a situation that can be adopted by real applications.