HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Conference papers

xESB: An Enterprise Service Bus for Access and Usage Control Policy Enforcement

Abstract : Enforcing complex policies that span organizational domains is an open challenge. Current work on SOA policy enforcement splits security in logical components that can be distributed across domains, but does not offer any concrete solution to integrate this security functionality so that it works across security services for organization-wide policies. In this paper, we propose xESB, an enhanced version of an Enterprise Message Bus (ESB), where we monitor and enforce preventive and reactive policies, both for access control and usage control policies, and both inside one domain and between domains. In addition, we introduce indicators that help SOA administrators assess the effectiveness of their policies. Our performance measurements show that policy enforcement at the ESB level comes with only moderate penalties.
Document type :
Conference papers
Complete list of metadata

Cited literature [24 references]  Display  Hide  Download

Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Friday, November 24, 2017 - 5:00:36 PM
Last modification on : Saturday, June 8, 2019 - 2:14:02 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Gabriela Gheorghe, Stephan Neuhaus, Bruno Crispo. xESB: An Enterprise Service Bus for Access and Usage Control Policy Enforcement. 4th IFIP WG 11.11 International on Trust Management (TM), Jun 2010, Morioka, Japan. pp.63-78, ⟨10.1007/978-3-642-13446-3_5⟩. ⟨hal-01061319⟩



Record views


Files downloads