CAJ | 학술논문

Web Services 作为实现 SOA 的主流技术标准，得到了广泛应用，其安全性值得高度关注。基于 WS-Security 标准，对 Web Services 的安全机制进行了研究，对 Web Services 安全防护的功能、遵循的标准进行了分析，并结合工程实践，从身份识别、SOAP 消息安全防护和访问控制等方面提出了Web Services 安全防护的实现方案，可以实现核心的安全防护功能，对基于 Web Services 技术架构的系统安全防护具有指导意义。
Web Services 작위실현 SOA 적주류기술표준，득도료엄범응용，기안전성치득고도관주。기우 WS-Security 표준，대 Web Services 적안전궤제진행료연구，대 Web Services 안전방호적공능、준순적표준진행료분석，병결합공정실천，종신빈식별、SOAP 소식안전방호화방문공제등방면제출료Web Services 안전방호적실현방안，가이실현핵심적안전방호공능，대기우 Web Services 기술가구적계통안전방호구유지도의의。
Web services, as a mainstream technical standard for SOA implementation, has now been ap-plied extensively, and its security is worthy of high attention. This paper studies the security mechanism of Web services based-on the WS-security standards, analyses the standards it follows, and describes the function of security services. It gives an applicable Web services protection solution from the aspects of i-dentification, SOAP message security and access control based on engineer practice. This solution can im-plement the core security protection functions of Web services, and has directive significance for Web serv-ices-based SOA system's security protection.