| Download ( PDF | 87kB) |
Preventing malicious Portlets from Communication and Intercepting in Collaboration Portals
Gmelch, Oliver und Pernul, Günther (2010) Preventing malicious Portlets from Communication and Intercepting in Collaboration Portals. In: Proceedings of the International Conference on Security and Cryptography (SECRYPT). (Im Druck)Veröffentlichungsdatum dieses Volltextes: 25 Aug 2010 07:49
Buchkapitel
DOI zum Zitieren dieses Dokuments: 10.5283/epub.16308
Zusammenfassung
In a “networked enterprise”, distributed teams of partner organizations, humans, computer applications, au- tonomous robots, and devices are interlinked to collaborate with each other in order to achieve higher pro- ductivity and to perform joint projects or produce joint products that would have been impossible to develop without the contributions of multiple collaborators. Within a ...
In a “networked enterprise”, distributed teams of partner organizations, humans, computer applications, au-
tonomous robots, and devices are interlinked to collaborate with each other in order to achieve higher pro-
ductivity and to perform joint projects or produce joint products that would have been impossible to develop
without the contributions of multiple collaborators. Within a collaboration, security aspects are of critical
importance. This is in particular true for loosely coupled collaborations in which individual members of one
alliance are working with each other within a certain project only, but may be competitors in other market
fields at the same time. Going beyond the current state of the art in portal-based collaboration platforms, this
paper presents an approach to prevent unintended information disclosure by malicious portlet instances. The
solution is built on open standards (JSR 286 and XACML) and may be incorporated in collaboration-wide
enterprise portals in order to regulate information flow during inter-portlet communication.
Beteiligte Einrichtungen
Details
| Dokumentenart | Buchkapitel |
| Buchtitel: | Proceedings of the International Conference on Security and Cryptography (SECRYPT) |
|---|---|
| Datum | Juli 2010 |
| Institutionen | Wirtschaftswissenschaften > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul) Informatik und Data Science > Fachbereich Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul) |
| Stichwörter / Keywords | inter-portlet communication, portal servers, security policies |
| Dewey-Dezimal-Klassifikation | 000 Informatik, Informationswissenschaft, allgemeine Werke > 004 Informatik |
| Status | Im Druck |
| Begutachtet | Ja, diese Version wurde begutachtet |
| An der Universität Regensburg entstanden | Ja |
| URN der UB Regensburg | urn:nbn:de:bvb:355-epub-163089 |
| Dokumenten-ID | 16308 |
Downloadstatistik
Downloadstatistik