End-to-End Security for Enterprise Mashups

Abstract. Mashups are gaining momentum as a means to develop situational Web applications by combining different resources (services, data feeds) and user interfaces. In enterprise environments, mashups are recently used for implementing Web-based business processes, however, security is a major concern. Current approaches do not allow the mashup to securely consume services with diverse security requirements without sharing the credentials or hard-coding them in the mashup definition. In this paper, we present a solution to integrate security concerns into an existing enterprise mashup platform. We provide an extension to the language and runtime and propose a Secure Authentication Service (SAS) to seamlessly facilitate secure authentication and authorization of endusers with the services consumed in the mashup.

• Type: Conference
• Year: 2009
• Where: ICSOC
• Authors: Florian Rosenberg, Rania Khalaf, Matthew J. Duftler, Francisco Curbera, Paula Austel
• Keywords: Enterprise Mashup Platform, ICSOC 2009, Mashup Definition, Secure Authentication