Advanced protection of workflow sessions with SEWebSession - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

Advanced protection of workflow sessions with SEWebSession

Stéphane Moinard
  • Fonction : Auteur
  • PersonId : 938964

Résumé

This paper presents Secure Enhanced Web Session providing an advanced protection of the Web sessions required in the workflow environments. SEWebSession provides mandatory access control to the session state since the proposed policy is outside the scope of the Workflow developers and participants. Our MAC approach authorises various confidentiality and integrity properties for the session state. SEWebSession controls a session state whether it is maintained in the memory of the Web server, a dedicated server or a SQL Database. The protection rules can be reused from one platform to another one. SEWebSession has been successfully integrated within an industrial Workflow environment running on Windows platforms. The experimentations show the efficiency of SEWebSession for protecting Microsoft Windows/IIS platforms. However, SEWebSession can be easily ported within Linux/Apache platforms.

Domaines

Web
Fichier non déposé

Dates et versions

hal-00809341 , version 1 (09-04-2013)

Identifiants

Citer

Maxime Fonda, Stéphane Moinard, Christian Toinard. Advanced protection of workflow sessions with SEWebSession. SBP'12, Sep 2012, Tallinn, Estonia. pp.713-718, ⟨10.1007/978-3-642-36285-9_71⟩. ⟨hal-00809341⟩
50 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More