Security policy validation for web services

Abstract

Methods, apparatus, and products are disclosed for security policy validation for web services that include: transforming a security policy for a web service into a policy predicate logic representation; providing a profile predicate logic representation that represents one or more rules of a security policy profile; and determining whether the security policy satisfies the security policy profile in dependence upon the policy predicate logic representation and the profile predicate logic representation.

Description

technical field [0001] The field of the invention relates to data processing, or, more specifically, to methods, devices and products for security policy validation of web services. Background technique [0002] Many enterprises are currently developing using a service-oriented architecture (SOA) as their business models change more frequently. SOA makes application development easier because technology-independent services can be coupled on an intranet or via the Internet. As business models change more frequently, the underlying computing environments on which applications run are becoming more complex, as computers can be networked using complex topologies, including firewalls and intermediate servers. Therefore, proper configuration of non-functional aspects such as security requires a fairly deep understanding of this complex environment. [0003] In light of this development, it is important to align security with the software engineering process from the start. Unf...

AI Technical Summary

Problems solved by technology

However, in the prior art, the process of determining whether the security policy matches the security profile is a manual process, fraught with errors due to the complexity of the SOA environment

Thus, the reader will understand that there is room for improvement in the validation of security policies for web services

Images