Advanced protection of workflow sessions with SEWebSession - Archive ouverte HAL Access content directly
Conference Papers Year : 2012

Advanced protection of workflow sessions with SEWebSession

Stéphane Moinard
  • Function : Author
  • PersonId : 938964

Abstract

This paper presents Secure Enhanced Web Session providing an advanced protection of the Web sessions required in the workflow environments. SEWebSession provides mandatory access control to the session state since the proposed policy is outside the scope of the Workflow developers and participants. Our MAC approach authorises various confidentiality and integrity properties for the session state. SEWebSession controls a session state whether it is maintained in the memory of the Web server, a dedicated server or a SQL Database. The protection rules can be reused from one platform to another one. SEWebSession has been successfully integrated within an industrial Workflow environment running on Windows platforms. The experimentations show the efficiency of SEWebSession for protecting Microsoft Windows/IIS platforms. However, SEWebSession can be easily ported within Linux/Apache platforms.

Domains

Web
No file

Dates and versions

hal-00809341 , version 1 (09-04-2013)

Identifiers

Cite

Maxime Fonda, Stéphane Moinard, Christian Toinard. Advanced protection of workflow sessions with SEWebSession. SBP'12, Sep 2012, Tallinn, Estonia. pp.713-718, ⟨10.1007/978-3-642-36285-9_71⟩. ⟨hal-00809341⟩
49 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More