基于webservices应用的安全机制分析-analysis of security mechanism based on web services application.docxVIP

太l反理工大学硕士研究生学位论文RESEARCH OFSECURITYMECHANISMONWEBSERVICESAPPLICATIONABSTRACTWebServicesiscompletelyservice-orientedtechnologyarchitecturefordistributedapplications，andithasbeenwidelyused invariousareasoftheapplicationsystemdevelopmentwithitsexcellentscaJabilit比lowcouplingandplatformindependence.Butitsexistingsecuritymechanismsmainlyfocusonthesecuritymodelandsecuritytechnology，soit isnotperfectenoughtoensure theoverallapplication-levelWebServicessecurity.Therefore，thesecurityofWebServiceshasimportantth∞reticalandappliedvaJue，andinthiscontextthispaperis toextendandoptimizetheexistingsecuritymechanisms，andthen proposeageneralsecuritymechanismmodelofWebServices tos位engthenthesecurityofWebservicesasawhole.Theresearchworkandinnovationsareasfollows.Firstly，thispaperconductsin-depthresearch andanalysisontbeWebServices architecture and its existing security mechanisms. There is acomprehensiveintroductiontoWebServices architectureanditscoretechnicalspecificationsSOAP，WSDLandUDDI，andthispaperconductstheresearchontheexistingsecurityandWS-SeωrityspecificationofWebServices，fromthe太原理工大学硕士研究生学位论文data integrity，confidentiality and authenticationsummarizes its securityvulnerabilities.In themasteryoftheexistingsecuritymechanismanditsvulnerabilitiesof WebServic臼，basedonthesecurityrequirementsinthedistributedapplications，thispaperanalyzesthe securityproblemswhichmustbe resolvedinthe processofbuildingthedistributedapplications.Toresolvetheseproblems，thispaperexpands andop挝mizestheWS-Securitysecurityspecifications，andproposesa security mechanism model wbich can satisfYthe security needs of thedistributedapplications.Tbesecuritymechanismmodelincludesfiveaspects.Thefírstistodesignthesafetyofthenetworkstructurewhichcanprovidessafe，reliableenvironmentforsystemoperation.Thesecondisessentialexpansionand optimization for WS - Security standard，through which the security mechanismmodelcanrealizemulti-encryptionandmulti-signature.BasedontheoptimizedWS-Security，thesecuritymechanismmodelreali