Study Of Web Services On Security Issues And Solutions

One of software development trends is the distributed computing, and the leap of distributed computing technology is web services. Web services is the object which is deployed on the web. Web services based on the XML and SOAP has the characteristics of interoperability, encapsulation, openness, integration, cross-platform.But the security issue is the key issue that impedes the development of web services. The first major obstacle of web services in the commercial application is the security issue. Web services faces enormous security challenges. In order to promote the wide application of web services in the area of Electronic-Commerce, digital library and system integration, a reasonable, feasible, comprehensive solution is raised in this paper based on the characteristics of web services and security risks or attacks. Not only do these solutions strive to employ the latest technology, but also combine the mature security technology. Information security is both a technical problem and a non-technical problem. Non-technical problems cover factors of management, information security laws, information security training and so on, so the solution in this paper also includes these factors. In this way, the solution is more comprehensive, and web services security is more reliable.Digital library is also notably driven by web services. We can make full use of its characters to resolve resources integration problems of digital library in the current distributed heterogeneous environment, to implement the distributed digital library based on web services. The prototype of these digital libraries has been raised. Obviously, security problems are the biggest obstacles to them. This paper analyzes the security needs of this type of digital library and proposes the corresponding security framework. In addition, this paper takes the Heriot-Watt University Library's Zetoc web services in the United Kingdom as an example and discusses their security measures and security system. Finally, this paper summarizes the best feasible, comprehensive, specific security practice of digital library based on web services.