Change search
ReferencesLink to record
Permanent link

Direct link
Implementing a SOAP security proxy and Evaluating SOAP security standards
Umeå University, Faculty of Science and Technology, Department of Computing Science.
2012 (English)Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesis
Abstract [en]

The project had two intended goals. One was to create a prototype for the proxy component of the Secure Webservice Platform system that can function on the GNU/Linux operating system. The other goal was to evaluate a number of different SOAP security methods in order to determine if any could function as a alternative to the Specifikation för Säker Elektronisk Kommunikation (SSEK) standard.

In order to achieve the second goal, an evaluation was performed on the SOAP security methods Transport Layer Security, XML Signature, XML Encryption, Web Service Security, and Web Service Secure Conversation using a set of predefined criteria. In order to be able to evaluate if any of the methods could function as an alternative to SSEK, an evaluation of SSEK using the predefined criteria was also performed. In order to achieve the first goal, a prototype was constructed and SSEK security was implemented using a combination of node.js, libxmljs and xmlsec.

The conclusions drawn from the results obtained is that none of the evaluated methods could work as an alternative to SSEK security, although some could come close when combined with others. It was also concluded that while node.js could be used to construct a prototype, due to the limited amount of support for SOAP web service standards provided by node.js as well as the amount of adjustments that needed to be done on libxmljs in order to implement the security, careful consideration should be taken before selecting node.js as a platform for similar projects.

Place, publisher, year, edition, pages
, UMNAD, 916
National Category
Engineering and Technology
URN: urn:nbn:se:umu:diva-58062OAI: diva2:546720
External cooperation
Acino AB
Educational program
Bachelor of Science Programme in Computing Science
Available from: 2012-08-24 Created: 2012-08-24 Last updated: 2012-09-07Bibliographically approved

Open Access in DiVA

fulltext(247 kB)420 downloads
File information
File name FULLTEXT01.pdfFile size 247 kBChecksum SHA-512
Type fulltextMimetype application/pdf

By organisation
Department of Computing Science
Engineering and Technology

Search outside of DiVA

GoogleGoogle Scholar
Total: 420 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 161 hits
ReferencesLink to record
Permanent link

Direct link