INFORUM 2006 - 12. Annual Conference On Professional Information Resources

XML and Security [poster / contribution]

Author: Dagmar Brechlerová,  Czech University of Agriculture - Faculty of Economics and Management, Czech Republic

Fulltexts

Abstract

Web services are based on W3C standards, they are technologically independent. But on of the most important problem is that security is not solved here. Protocol SOAP is XML document, which is moved by HTTP protocol. For commercial and other applications where sensitive or personal information are used this non security is big problem.

Where information are transferred there is necessary these information guarantee against modification or disclosure, it is necessary verify identity of some person. Basic security requirement is necessary to solve (authenticity, data integrity and other...), Standardization of web security is solved very quickly... In this paper summary of security technology will be inscribe. This is XML Signature (XML-DSIG or XML-SIG or XS), XML Encryption (XE), XML Key Management Specification (XKMS), Secure Assertion Markup Language (SAML), XML Access Control Markup Language (XACML), WS - security (Web Services Security), EbXML Message Services.

About the author

Professional career: From 1993 (Present position) - Czech University of Agriculture in Prague, Faculty of Economics and Management, department of IT, assistant professor. I lecture Programming languages, Language C, algoritmization. I was the first to established new subject Computer data protection (I often lecture at other Universities in this area ).I am responsible for numbers of diploma and bachelor thesis.

Grants: Some internal grants from our university, grant from the Ministry of Education (curriculum of Computer data security), common grants with colleagues from the Faculty of Mathematics and Physics of Charles University in Prague (physical modelling). From 2001 grant VZ 411100010 (Ministry of education) co solver, 2002-2003 co solver of grant Implementation of principle e-Administration to University Information System, 2002-2003 co-solver of grant Concept of virtual education at CAU

From 1997 Gopas a. s. (and others) External cooperation with Training Center (Gopas and others). I established new courses in Computer and data security, I made materials for e-learning services, educational multimedia. I work as a consultant in the area computer security

Other activities: International Federation for Information Processing TC11- Security and Protection in Information Processing Systems: national delegate (Czech Republic) Member of WG 11.7 (see WG 9.6) Information Technology: Misuse and The Law group.

Member of some programme committees (IFIP /Sec 03 Athens, Ws Security and Control, Software developing, Ostrava 2004,2003,2002,....).

Computer security specialization: digital signature, authentication, intrusion detection system, security education, security if internet technology, computers and law.

I am an author or co-author of more than 60 original papers and contributions to conferences, some chapter of books and 3 university text books.

Grant from EU Arion (Great Britain 2000) Erasmus- Socrates: University Malaga – Spain (2003, 2006), University Tampere - Finland(2000) University Tampere – Finland (2004)