| |
The Web’s potential for distributed programming has been proven not only in the business realm, but also in the accelerator controls domain. Web Services describes clients and servers that communicate over the Internet’s Hypertext Transfer Protocol (HTTP) using predefined Internet-based Application Programming Interfaces (APIs). It is the uniqueness of Web Services transactions such as cloud computing, data sharing, and data archiving that give rise to the security concerns of Web Services (authentication, data integrity, non-repudiation, and privacy). At Argonne National Laboratory’s Advanced Photon Source, Simple Object Access Protocol (SOAP)-based Web Services were implemented into the Integrated Relational Model of Installed Systems (IRMIS) as the application interface to Oracle’s Content Server document management software. This report reviews the basics of Web Services, cyber-security issues that are inherent for Web Services, current Web Services security implementation practices, and future directions of Web Service security development efforts where the overriding goal of Web Services security is to focus on managing risk and protecting data.
|
|
