A Security Architecture for Web Services
Hikmat Farhat, Khalil Challita
Journal of Information Security Research, Vol. 2, No. 2, 2011.
DOI: 
Link: http://www.dline.info/jisr/fulltext/v2n2/1.pdf
Abstract:
Web services are quickly becoming the most popular tool for distributed computing. Due to this popularity a comprehensive security architecture is needed. In this paper we introduced such a comprehensive architecture that includesin addition to the standard services of integrity and confidentiality- authentication, authorization and a defense against denial of service attacks. This model builds on existing standards such as SOAP, WSS and XACML. A detailed implementation with performance evaluation using the open source Apache tools is also discussed.