Access control for Web Services Based on feedback and decay

Security is a very important requirement for any Web application. In order to avoid free-rider behaviors and reduce requesters' malicious accesses in Web services, a kind of trust management based on feedback and time decay in Web Services is presented in this paper. According to the service providers' feedback, honest accesses will be rewarded while dishonest ones will get punishment by such mechanism, which would effectively encourage the service requesters to take part in access control honestly and avoid free-rider behaviors by giving those who are dishonest and inactive a kind of time decay punishment. After simulated experiments, the effectiveness of the trust mechanism is verified, which indicates that this kind of trust management is able to encourage the service requesters to take part in access control much more actively with an honest attitude so that the security of Web services gets improved.

[1]  Audun Jøsang,et al.  A survey of trust and reputation systems for online service provision , 2007, Decis. Support Syst..

[2]  David C. Yen,et al.  Awareness and challenges of Internet security , 2000, Inf. Manag. Comput. Secur..

[3]  Xu Feng.  Research and Development of Trust Management in Web Security , 2002 .

[4]  Jaehong Park,et al.  Security architectures for controlled digital information dissemination , 2000, Proceedings 16th Annual Computer Security Applications Conference (ACSAC'00).

[5]  Joan Feigenbaum,et al.  Decentralized trust management , 1996, Proceedings 1996 IEEE Symposium on Security and Privacy.

[6]  Ling Liu,et al.  PeerTrust: supporting reputation-based trust for peer-to-peer electronic communities , 2004, IEEE Transactions on Knowledge and Data Engineering.

[7]  Elisa Bertino,et al.  Security for Web Services and Service-Oriented Architectures , 2009 .

[8]  David C. Chou,et al.  Security development in Web Services environment , 2005, Comput. Stand. Interfaces.

[9]  Marcus J. Ranum,et al.  Web Security Sourcebook , 1997 .