Last 3 Donors

1. Stephen J. Kidd

2. Maria Hull

3. Rosemary J. Bennett

...more generous donors

Support us

Funding progress for 2010:

References

Authors

Massimo Mecella

Printer-friendly

How to cite

Massimo Mecella

About the author:
No description available of Massimo Mecella...

ADD DESCRIPTION

← Button will not work: You have not enabled Javascript. How do I enable it?

ADD PUBLICATION

← Button will not work: You have not enabled Javascript. How do I enable it?

SHARE YOUR RESEARCH

← Button will not work: You have not enabled Javascript. How do I enable it?

Publications by Massimo Mecella (bibliography)

» 2008 «

Edit | Del

Catarci, Tiziana, Leoni, Massimiliano de, Marrella, Andrea, Mecella, Massimo, Salvatore, Berardino, Vetere, Guido, Dustdar, Schahram, Juszczyk, Lukasz, Manzoor, Atif and Truong, Hong Linh (2008): Pervasive Software Environments for Supporting Disaster Responses. In IEEE Internet Computing, 12 (1) pp. 26-37

» 2006 «

Edit | Del

Mecella, Massimo, Ouzzani, Mourad, Paci, Federica and Bertino, Elisa (2006): Access control enforcement for conversation-based web services. In: Proceedings of the 2006 International Conference on the World Wide Web 2006. pp. 257-266. Available online

“Service Oriented Computing is emerging as the main approach to build distributed enterprise applications on the Web. The widespread use of Web services is hindered by the lack of adequate security and privacy support. In this paper, we present a novel framework for enforcing access control in conversation-based Web services. Our approach takes into account the conversational nature of Web services. This is in contrast with existing approaches to access control enforcement that assume a Web service as a set of independent operations. Furthermore, our approach achieves a tradeoff between the need to protect Web service's access control policies and the need to disclose to clients the portion of access control policies related to the conversations they are interested in. This is important to avoid situations where the client cannot progress in the conversation due to the lack of required security requirements. We introduce the concept of k-trustworthiness that defines the conversations for which a client can provide credentials maximizing the likelihood that it will eventually hit a final state.”

Copyrights may apply