Designing Dependable Web Services Security Architecture Solutions

Web Services Security Architectures have three layers, as provided by NIST standard: Web Service Layer, Web Services Framework Layer (.NET or J2EE), and Web Server Layer. In services oriented web services architecture, business processes are executed as a composition of services, which can suffer from vulnerabilities pertaining to secure data access and protecting code of Web Services. The goal of the Web services security architecture is to summary out the details of message-level security from the mainstream business logic, with a focus on Web Service contract design and versioning for SOA. Service oriented web services architectures impose additional analysis complexity as they provide much flexibility and frequent changes with in orchestrated processes and services. In this paper, we discuss about developing dependable solutions for Web Services Security Architectures in terms of Privacy and Trust negotiation. All this research is motivated by Secure Service Oriented Analysis and Design research domain. We initially validate this by a BPEL Editor using GWT for RBAC and Privacy. Finally a real world case study is implemented using J2EE, for validating our approach. Secure Stock Exchange System using Web Services is to automate the stock exchange works, and can help user make the decisions when it comes to investment.