Composite Web Services Security Considerations

Abstract—Web services are modular, self describing software components that can be invoked over a distributed network. A single transaction can be composed of many individual Web services. There are many security considerations that have to be taken into account when assessing such a Web service transaction. This paper investigates the security concerns involved in composite Web services and introduces at the relevant security standards and legislation as motivation for a trust assurance protocol. In this paper, we focus on the transaction path elicitation in Web services transactions so that trust may be established in an environment where near-perfect information can be achieved. I