SOA Security

Experience SOA Security with our SOA-Security LAB.

New Security Challenges

In a Service-oriented Architecture a multiple of independent applications are acting together seamlessly - increasing the vulnerability of the whole system exponentially compared to monolithic applications. As companies around the world move from an isolated IT-infrastructure to open systems based on the SOA paradigm, strong security concepts are a pre-requisite to prevent jeopardizing a company’s knowledge and assets. Well-defined security goals as authentication and authorisation, confidentiality and integrity as well as monitoring and auditing need to be reconsidered under the changed conditions in order to face the new security risks successfully.

Facets of SOA-Security

Security in Service-oriented Architectures is not only a technical issue, but a business requirement, which needs to be considered on all levels within an enterprise - reaching from the basic network infrastructure to the business contracts between a company and its partners, customers, and employees. To read more, click here.

Research Topics

Model-driven Security

Getting from abstract security requirements to a secure SOA is the challenge in the area of model-driven security. To facilitate a consistent security configuration of multiple systems in an SOA, dependencies and contradictions between different requirements need to be taken into consideration. Therefore at the HPI, a conceptional security model has been developed that enables the description of security policies as a set of abstract security intentions, which can be translated automatically into concrete security policies (e.g. WS-Policy).

Trust Management

Connecting computers on a technical layer across networks is not sufficient to establish an online collaboration between business partners. One of the key ingredients for successful cooperations is creating trust between two unrelated parties in order to carry out sensitive transactions. At the HPI, innovative methods to establish, maintain and describe trust (e.g. using reputation systems, or by a quantitative representation) are in the scope of our research.

Digital Identites and Federated Identity Management

As soon as a service exposes confidential or personal information, the identity of the requestor is of major importance to restrict access only to legitimate users. In order to make the identity available to all services in an SOA, federated identity management emerged as a new identity model to enable the propagation of identity information to all services especially when these are located in different trust domains. The management and establishment of these federations under consideration of strong security requirements is one of the main research topics at the HPI. One of our pilot projects in this area is the HPI Identity Provider which allows HPI members to use an OpenID to authenticate with all Web Sites that support OpenID.

SOA Security Team

Prof. Dr. Christoph Meinel (Head)
Dr. Feng Cheng
Dipl.-Inform. Christian Willems
Former Members:
Ivonne Scherfenberg, Michael Menzel, Robert Warschofsky, Rehab Alnemr , Matthias Quasthoff, Chrstian Wolter

Events

Selected Publications

Michael Menzel, Robert Warschofsky, Ivonne Thomas, Christian Willems, Christoph Meinel: The Service Security Lab: A Model-Driven Platform to Compose and Explore Service Security in the Cloud. Proceedings of the 2010 IEEE World Congress on Services (Services 2010), pp.115-122, (Miami, USA, Juli 2010).
Michael Menzel, Robert Warschofsky, Christoph Meinel: A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures. Proceedings of the 2010 IEEE International Conference on Web Services (ICWS 2010), pp.243-250, (Miami, USA, Juli 2010).
Michael Menzel, Christoph Meinel: SecureSOA - Modelling Security Requirements for Service-oriented Architectures. Proceedings of the 2010 IEEE International Conference on Services Computing (SCC 2010), pp.146-153, Miami, USA, Juli 2010.
Ivonne Thomas, Christoph Meinel: Enhancing Claim-Based Identity Management by Adding a Credibility Level to the Notion of Claims. Proceedings of the IEEE Conference on Service Computing (SCC 2009), Bangalore, India, September 2009.
Michael Menzel, Christoph Meinel: A Security Meta-Model for Service-Oriented Architectures. Proceedings of the IEEE Conference on Service Computing (SCC 2009), Bangalore, India, September 2009.
Rehab Alnemr, Justus Bross, Christoph Meinel: "Constructing a Context-aware Service-Oriented Reputation Model using Attention Allocation Points",IEEE SCC 2009, International Conference on Services Computing, september 2009, Bangalore, India.
Rehab Alnemr, Matthias Quasthoff, Christoph Meinel: "Taking Trust Management to the Next Level", Book chapter in Handbook of Research on P2P and Grid Systems for Service-Oriented Computing: Models, Methodologies and Applications,IGI Global, Hershey, 2009.
Rehab Alnemr, Christoph Meinel: Getting more from Reputation Systems: A Context-aware Reputation Framework based on Trust Centers and Agent Lists, The Third International Multi-Conference on Computing in the Global Information Technology, Greece, July 2008.
Michael Menzel, Christian Wolter, Christoph Meinel
Towards the Aggregation of Security Requirements in Cross-Organisational Service Compositions. Proc. 11th BIS, Springer LNCS, Innsbruck, Austria, May 2008, ISBN:978-3-540-79396-3

Kontakt

Du möchtest mit uns in Austausch treten, oder hast andere Fragen? Schicke uns gern eine Mail an sec-eng-webadmin(at)hpi.de

News!

Juli 2022

HPI Cybersicherheitskurse für deutsch-chinesische Sommerschule der Universität Nanjing

Das HPI unterhält seit mehr als zwei Jahrzehnten enge Beziehungen zu bekannten chinesischen Universitäten und hat bereits 2011 eine eigene HPI Research School an der Universität Nanjing eröffnet. Im Rahmen einer interdisziplinären Sommerschule der Universität Nanjng bot das HPI vom 5. bis 7. Juli 2022 speziell eine Lecture Series zum Thema Cybersicherheit an.

Juni 2022

Ankündigung: Kostenloser Onlinekurs "Tatort Internet: Auflage 2022" startet im Oktober! im Kurs stellen Prof. Dr. Ch. Meinel und das Security-Team aktuelle und grundlegende Themen der Internetsicherheit vor! Melden Sie sich bereits heute an, um den Kursstart nicht zu verpassen!

Mai 2022

openHPI-Kurs: Cloud Computing durchgeführt von Prof. Meinel, Hendrik Steinbeck und Daniel Köhler. Neben der grundlegenden Funktionsweise des Cloud-Computings und der Enabler-Technologien steigt der Kurs auch in Risiken und Verantwortungen beim CC ein.

Nachtrag: Der Kurs ist abgeschlossen, aber die Lehrinhalte sind weiterhin im Selbststudium verfügbar!

März 2022

DDoS-Angriffe: Was sie sind und wie sie funktionieren

Der Krieg zwischen Russland und der Ukraine findet nicht mehr nur im physischen Raum statt. Die Cyberkriegsführung mit Angriffen auf gegnerische Systeme spielt für beide Seiten eine wichtige Rolle. Um der Ukraine zu helfen, startete die Online-Aktivisten-Gruppe Anonymous im Februar 2022 einen Aufruf, sich an DDos-Attacken gegen Russland zu beteiligen. Im Interview erklärt Daniel Köhler, was DDoS-Attacken sind, was ihr Ziel ist und ob man gegen sie vorgehen kann.

Januar 2022

Im Januar ist eine Wiederholung unserer englischsprachigen Cybersicherheits-Reihe auf openHPI mit dem Kurs Confidential Communication in the Internet gestartet.

Werde Teil unseres Teams!

Lehre

Sommersemester 2024

Master Seminar: Emerging Technologies for Security Operations

Wintersemester 2023/44

Bachelor Seminar: Big Data Security Analytics
Master Seminar: Network Security in Practice
Master Project
- Towards Red Team Exercising

Team

Supervisor: Prof. Dr. sc. nat., Dr. rer. nat. Christoph Meinel
Head & Senior Researcher: Dr. rer. nat. Feng Cheng
PostDoc/PhD Students/Research Assistants:
- Dr.-Ing. Pejman Najafi
- Eric Klieme, M.Sc.
- Alexander Mühle, M.Sc.
- Daniel Köhler, M.Eng.
- Mehryar Majd, M.Sc.
- Farzad Motlagh, M.Sc.
- Mehrdad Hajizadeh, M.Sc. (Visiting PhD Student, TU Chemnitz)
- Dominic Schaa (Master student assistant)
- Jonas Schmitz (ongoing Master thesis)
- Lars Prepens (ongoing Master thesis)
- Lieven Leue (ongoing Master thesis)
- Mohamed Budagow (ongoing Master thesis)
External PhD Students:
- Hendrik Graupner M.Sc. (with Bundesdruckerei GmbH)
- Kennedy Torkura, M.Sc. (external, Mitigant GmbH, Potsdam)
- Kaja Schmidt, M.Sc. (with European Commision)
Former Team Members