Research Of Web Services Security Technologies Based On .NET

As a model with loose coupling and distributed calculating. Web services provides a way to intemperate in a platform- and language-neutral manner between two applications, However, Web services brings some new security venture, such as new menaces that are from XML application level, exposure of key applications, span among enterprises' boundary, etc.These new security venture slowed the widespread acceptance and implementation of Web services to a certain extent.To guarantee Web Services security, many people are developing lots of XML-based security standards, and hope to resolve problems about authentication, access control, message-level security and data security. Nevertheless, the actual measures for securing Web services can not protect Web services adequately yet. In the field of Web services research, it becomes a subject with important significance that construct a comprehensive solution for Web services security.This paper analysis and research the security of Web Service in several points including theory, technology, design and programming implementation. All of the work in this paper are as follows:1. Reading diversified relative materials of Web Services. Researching and analyzing the traits, model, and architecture of web service. This paper also simply describes some component of Web Services including SOAP, WSDL, XML, and UDDI.2. Researching on XML Signature Syntax and Processing, XML Encryption Syntax and Processing, and WS-Security. This paper tries to propose several optimized opinion about security and performance of WS-Security.3. This paper focuses on security of message layer of Web Services. Based on these preparations, the paper brings forward and implements a Web Services system message layer based, extendable security framework, which ensures Web Services message-level security and provides some security mechanisms such as signature,encryption, access control and audit.4. Finally, this paper implements a End to End Web Services Security solution under the .NET background on windows operating system by using c# programming language...