{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:38:56Z","timestamp":1750307936378,"version":"3.41.0"},"reference-count":61,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2007,5,1]],"date-time":"2007-05-01T00:00:00Z","timestamp":1177977600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Inf. Syst. Secur."],"published-print":{"date-parts":[[2007,5]]},"abstract":"<jats:p>\n            We address the problem of securing sequences of SOAP messages exchanged between web services and their clients. The WS-Security standard defines basic mechanisms to secure SOAP traffic, one message at a time. For typical web services, however, using WS-Security independently for each message is rather inefficient; moreover, it is often important to secure the integrity of a whole session, as well as each message. To these ends, recent specifications provide further SOAP-level mechanisms. WS-SecureConversation defines\n            <jats:italic>security contexts<\/jats:italic>\n            , which can be used to secure sessions between two parties. WS-Trust specifies how security contexts are issued and obtained. We develop a semantics for the main mechanisms of WS-Trust and WS-SecureConversation, expressed as a library for TulaFale, a formal scripting language for security protocols. We model typical protocols relying on these mechanisms and automatically prove their main security properties. We also informally discuss some pitfalls and limitations of these specifications.\n          <\/jats:p>","DOI":"10.1145\/1237500.1237504","type":"journal-article","created":{"date-parts":[[2007,6,6]],"date-time":"2007-06-06T14:37:11Z","timestamp":1181140631000},"page":"8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Secure sessions for Web services"],"prefix":"10.1145","volume":"10","author":[{"given":"Karthikeyan","family":"Bhargavan","sequence":"first","affiliation":[{"name":"Microsoft Research, Cambridge, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ricardo","family":"Corin","sequence":"additional","affiliation":[{"name":"University of Twente, The Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"C\u00e9dric","family":"Fournet","sequence":"additional","affiliation":[{"name":"Microsoft Research, Cambridge, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrew D.","family":"Gordon","sequence":"additional","affiliation":[{"name":"Microsoft Research, Cambridge, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2007,5]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/360204.360213"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1006\/inco.1998.2740"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-007-0203-0"},{"key":"e_1_2_1_4_1","volume-title":"13th European Symposium on Programming (ESOP'04)","volume":"2986","author":"Abadi M.","unstructured":"Abadi , M. , Blanchet , B. , and Fournet , C . 2004. Just fast keying in the pi calculus . In 13th European Symposium on Programming (ESOP'04) . LNCS, vol. 2986 . Springer, New York. 340--354. Abadi, M., Blanchet, B., and Fournet, C. 2004. Just fast keying in the pi calculus. In 13th European Symposium on Programming (ESOP'04). LNCS, vol. 2986. Springer, New York. 340--354."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/11513988_27"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948140"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/11690634_29"},{"key":"e_1_2_1_8_1","unstructured":"Barbir A. Goodner M. Gudgin M. Granqvist H. Nadalin A. etal 2006. Web Services Secure Conversation Language (WS-SecureConversation) Oasis Committee Draft Version 0.1. At http:\/\/www.oasis-open.org\/committees\/download.php\/20158\/ws-secureconversation-1.3-spec-cd-01.pdf.  Barbir A. Goodner M. Gudgin M. Granqvist H. Nadalin A. et al. 2006. Web Services Secure Conversation Language (WS-SecureConversation) Oasis Committee Draft Version 0.1. At http:\/\/www.oasis-open.org\/committees\/download.php\/20158\/ws-secureconversation-1.3-spec-cd-01.pdf."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111348.1111355"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111348.1111355"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030120"},{"key":"e_1_2_1_12_1","volume-title":"International Symposium on Formal Methods for Components and Objects (FMCO'03)","volume":"3188","author":"Bhargavan K.","unstructured":"Bhargavan , K. , Fournet , C. , Gordon , A. D. , and Pucella , R . 2004d. TulaFale: A security tool for web services . In International Symposium on Formal Methods for Components and Objects (FMCO'03) . LNCS, vol. 3188 . Springer, New York. 197--222. Bhargavan, K., Fournet, C., Gordon, A. D., and Pucella, R. 2004d. TulaFale: A security tool for web services. In International Symposium on Formal Methods for Components and Objects (FMCO'03). LNCS, vol. 3188. Springer, New York. 197--222."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2005.03.005"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSFW.2006.32"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/872752.873511"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/647171.716095"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.1"},{"key":"e_1_2_1_18_1","unstructured":"Box D. Curbera F. etal 2004. Web Services Addressing (WS-Addressing). At http:\/\/www.w3.org\/Submission\/2004\/SUBM-ws-addressing-20040810\/.  Box D. Curbera F. et al. 2004. Web Services Addressing (WS-Addressing). At http:\/\/www.w3.org\/Submission\/2004\/SUBM-ws-addressing-20040810\/."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1098\/rspa.1989.0125"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/794200.795136"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/s102070100009"},{"volume-title":"WS-ReliableMessaging Interop Workshop. At ftp:\/\/www6.software.ibm.com\/software\/developer\/library\/ws-rmseconscenar io.doc.","author":"Davis D.","key":"e_1_2_1_22_1","unstructured":"Davis , D. , Ferris , C. , Gajjala , V. , Gavrylyuk , K. , Gudgin , M. , Kaler , C. , Langworthy , D. , Moroney , M. , Nadalin , A. , Roots , J. , Storey , T. , Vishwanath , T. , and Walter , D . 2005 . WS-ReliableMessaging Interop Workshop. At ftp:\/\/www6.software.ibm.com\/software\/developer\/library\/ws-rmseconscenar io.doc. Davis, D., Ferris, C., Gajjala, V., Gavrylyuk, K., Gudgin, M., Kaler, C., Langworthy, D., Moroney, M., Nadalin, A., Roots, J., Storey, T., Vishwanath, T., and Walter, D. 2005. WS-ReliableMessaging Interop Workshop. At ftp:\/\/www6.software.ibm.com\/software\/developer\/library\/ws-rmseconscenar io.doc."},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1976.1055638"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.5555\/959088.959095"},{"key":"e_1_2_1_26_1","unstructured":"Ferris C. Langworthy D. etal 2004. Web Services Reliable Messaging Protocol (WS-ReliableMessaging). At http:\/\/msdn.microsoft.com\/ws\/2004\/03\/ws-reliablemessaging\/.  Ferris C. Langworthy D. et al. 2004. Web Services Reliable Messaging Protocol (WS-ReliableMessaging). At http:\/\/msdn.microsoft.com\/ws\/2004\/03\/ws-reliablemessaging\/."},{"key":"e_1_2_1_27_1","unstructured":"Freier A. O. Karlton P. and Kocher P. C. November 1996. The SSL protocol: Version 3.0. http:\/\/home.netscape.com\/eng\/ssl3\/draft302.txt.  Freier A. O. Karlton P. and Kocher P. C. November 1996. The SSL protocol: Version 3.0. http:\/\/home.netscape.com\/eng\/ssl3\/draft302.txt."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2002.806132"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00165-004-0058-1"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111348.1111357"},{"key":"e_1_2_1_31_1","unstructured":"Gudgin M. 2004. Using WS-Trust and WS-SecureConversation. MSDN. At http:\/\/msdn.microsoft.com\/library\/default.asp?url=\/library\/en-us\/dnwebsrv\/html\/ws-trustandsecureconv.asp.  Gudgin M. 2004. Using WS-Trust and WS-SecureConversation. MSDN. At http:\/\/msdn.microsoft.com\/library\/default.asp?url=\/library\/en-us\/dnwebsrv\/html\/ws-trustandsecureconv.asp."},{"key":"e_1_2_1_32_1","unstructured":"Gudgin M. Nadalin A. etal 2005a. Web Services Secure Conversation Language (WS-SecureConversation) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/17364\/lists.oasis-open.orgarchivesws-sx200512zip00000.zip.  Gudgin M. Nadalin A. et al. 2005a. Web Services Secure Conversation Language (WS-SecureConversation) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/17364\/lists.oasis-open.orgarchivesws-sx200512zip00000.zip."},{"key":"e_1_2_1_33_1","unstructured":"Gudgin M. Nadalin A. etal 2005b. Web Services Trust Language (WS-Trust) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/17364\/lists.oasis-open.orgarchivesws-sx200512zip00000.zip.  Gudgin M. Nadalin A. et al. 2005b. Web Services Trust Language (WS-Trust) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/17364\/lists.oasis-open.orgarchivesws-sx200512zip00000.zip."},{"key":"e_1_2_1_34_1","unstructured":"Gudgin M. Nadalin A. etal 2005c. Web Services Trust Language (WS-Trust) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/20160\/ws-trust-1.3-spec-cd-01.pdf.  Gudgin M. Nadalin A. et al. 2005c. Web Services Trust Language (WS-Trust) Version 1.2. At http:\/\/www.oasis-open.org\/committees\/download.php\/20160\/ws-trust-1.3-spec-cd-01.pdf."},{"key":"e_1_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Harkins D. and Carrel D. 1998. RFC 2409: The Internet Key Exchange (IKE). http:\/\/www.ietf.org\/rfc\/rfc2409.txt.   Harkins D. and Carrel D. 1998. RFC 2409: The Internet Key Exchange (IKE). http:\/\/www.ietf.org\/rfc\/rfc2409.txt.","DOI":"10.17487\/rfc2409"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.5555\/374742.374746"},{"key":"e_1_2_1_37_1","volume-title":"1st International Workshop on Web Services and Formal Methods (WS-FM","author":"Johnson J. E.","year":"2004","unstructured":"Johnson , J. E. , Langworthy , D. E. , Lamport , L. , and Vogt , F. H . 2004. Formal specification of a web services protocol . In 1st International Workshop on Web Services and Formal Methods (WS-FM 2004 ). University of Pisa. Johnson, J. E., Langworthy, D. E., Lamport, L., and Vogt, F. H. 2004. Formal specification of a web services protocol. In 1st International Workshop on Web Services and Formal Methods (WS-FM 2004). University of Pisa."},{"key":"e_1_2_1_38_1","volume-title":"Web Services Federation Language","author":"Kaler C.","year":"2003","unstructured":"Kaler , C. , Nadalin , A. , Web Services Federation Language ( WS-Federation) Version 1.0. At http:\/\/msdn.microsoft.com\/ws\/ 2003 \/07\/ws-federation\/. Kaler, C., Nadalin, A., et al. 2003a. Web Services Federation Language (WS-Federation) Version 1.0. At http:\/\/msdn.microsoft.com\/ws\/2003\/07\/ws-federation\/."},{"key":"e_1_2_1_39_1","unstructured":"Kaler C. Nadalin A. etal 2003b. WS-Federation: Passive Requestor Profile Version 1.0. At ftp:\/\/www6.software.ibm.com\/software\/developer\/library\/ws-fedpass.pdf.  Kaler C. Nadalin A. et al. 2003b. WS-Federation: Passive Requestor Profile Version 1.0. At ftp:\/\/www6.software.ibm.com\/software\/developer\/library\/ws-fedpass.pdf."},{"key":"e_1_2_1_40_1","unstructured":"Kaler C. Nadalin A. etal 2004a. Web Services Secure Conversation Language (WS-SecureConversation) Version 1.1. At http:\/\/msdn.microsoft.com\/ws\/2004\/04\/ws-secure-conversation\/.  Kaler C. Nadalin A. et al. 2004a. Web Services Secure Conversation Language (WS-SecureConversation) Version 1.1. At http:\/\/msdn.microsoft.com\/ws\/2004\/04\/ws-secure-conversation\/."},{"key":"e_1_2_1_41_1","unstructured":"Kaler C. Nadalin A. etal 2004b. Web Services Trust Language (WS-Trust) Version 1.1. At http:\/\/msdn.microsoft.com\/ws\/2004\/04\/ws-trust\/.  Kaler C. Nadalin A. et al. 2004b. Web Services Trust Language (WS-Trust) Version 1.1. At http:\/\/msdn.microsoft.com\/ws\/2004\/04\/ws-trust\/."},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF00197942"},{"key":"e_1_2_1_43_1","unstructured":"Keyser C. 2004. Source code for SCT tokens in a farm source code. http:\/\/blogs.msdn.com\/chriskeyser\/archive\/2004\/11\/30\/272678.aspx.  Keyser C. 2004. Source code for SCT tokens in a farm source code. http:\/\/blogs.msdn.com\/chriskeyser\/archive\/2004\/11\/30\/272678.aspx."},{"key":"e_1_2_1_44_1","unstructured":"Kleiner E. and Roscoe A. W. 2004. Web services security: A preliminary study using Casper and FDR. In Automated Reasoning for Security Protocol Analysis (ARSPA'04).  Kleiner E. and Roscoe A. W. 2004. Web services security: A preliminary study using Casper and FDR. In Automated Reasoning for Security Protocol Analysis (ARSPA'04)."},{"key":"e_1_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Kleiner E. and Roscoe A. W. 2005. On the relationship between web services security and traditional protocols. In Mathematical Foundations of Programming Semantics (MFPS XXI).  Kleiner E. and Roscoe A. W. 2005. On the relationship between web services security and traditional protocols. In Mathematical Foundations of Programming Semantics (MFPS XXI).","DOI":"10.1016\/j.entcs.2005.11.074"},{"volume-title":"Tools and Algorithms for the Construction and Analysis of Systems. LNCS","author":"Lowe G.","key":"e_1_2_1_46_1","unstructured":"Lowe , G. 1996. Breaking and fixing the Needham-Schroeder public-key protocol using CSP and FDR . In Tools and Algorithms for the Construction and Analysis of Systems. LNCS , vol. 1055 . Springer , New York . 147--166. Lowe, G. 1996. Breaking and fixing the Needham-Schroeder public-key protocol using CSP and FDR. In Tools and Algorithms for the Construction and Analysis of Systems. LNCS, vol. 1055. Springer, New York. 147--166."},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.5555\/794197.795075"},{"issue":"0","key":"e_1_2_1_48_1","first-page":"P1","volume":"2","author":"Microsoft Corporation","year":"2004","unstructured":"Microsoft Corporation 2004 . Web Services Enhancements (WSE) 2 . 0 S P1 . Microsoft Corporation. At http:\/\/msdn.microsoft.com\/webservices\/building\/wse\/default.aspx. Microsoft Corporation 2004. Web Services Enhancements (WSE) 2.0 SP1. Microsoft Corporation. At http:\/\/msdn.microsoft.com\/webservices\/building\/wse\/default.aspx.","journal-title":"Web Services Enhancements (WSE)"},{"volume-title":"Communicating and Mobile Systems: the &pi;-Calculus","author":"Milner R.","key":"e_1_2_1_49_1","unstructured":"Milner , R. 1999. Communicating and Mobile Systems: the &pi;-Calculus . Cambridge University Press , Cambridge . Milner, R. 1999. Communicating and Mobile Systems: the &pi;-Calculus. Cambridge University Press, Cambridge."},{"key":"e_1_2_1_50_1","unstructured":"Nadalin A. Kaler C. Hallam-Baker P. and Monzillo R. 2004. OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security 2004). OASIS Standard 200401. At http:\/\/docs.oasis-open.org\/wss\/2004\/01\/oasis-200401-wss-soap-message-security-1.0.pdf.  Nadalin A. Kaler C. Hallam-Baker P. and Monzillo R. 2004. OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security 2004). OASIS Standard 200401. At http:\/\/docs.oasis-open.org\/wss\/2004\/01\/oasis-200401-wss-soap-message-security-1.0.pdf."},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/359657.359659"},{"key":"e_1_2_1_52_1","volume-title":"Security Services TC","author":"OASIS","year":"2005","unstructured":"OASIS Security Services TC 2005 . Security Assertion Markup Language FAQ. OASIS Security Services TC. At http:\/\/www.oasis-open.org\/committees\/security\/faq.php. OASIS Security Services TC 2005. Security Assertion Markup Language FAQ. OASIS Security Services TC. At http:\/\/www.oasis-open.org\/committees\/security\/faq.php."},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.5555\/353677.353681"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/322510.322530"},{"key":"e_1_2_1_55_1","unstructured":"Ryan P. Y. A. Schneider S. A. Goldsmith M. H. Lowe G. and Roscoe A. W. 2001. The Modeling and Analysis of Security Protocols: the CSP Approach. Pearson Education.   Ryan P. Y. A. Schneider S. A. Goldsmith M. H. Lowe G. and Roscoe A. W. 2001. The Modeling and Analysis of Security Protocols: the CSP Approach. Pearson Education."},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.5555\/353594.353603"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2003.1250585"},{"key":"e_1_2_1_58_1","unstructured":"W3C 2003. SOAP Version 1.2. W3C. W3C Recommendation at http:\/\/www.w3.org\/TR\/soap12.  W3C 2003. SOAP Version 1.2. W3C. W3C Recommendation at http:\/\/www.w3.org\/TR\/soap12."},{"volume-title":"IEEE Computer Society Symposium on Research in Security and Privacy. 178--194","author":"Woo T.","key":"e_1_2_1_59_1","unstructured":"Woo , T. and Lam , S . 1993. A semantic model for authentication protocols . In IEEE Computer Society Symposium on Research in Security and Privacy. 178--194 . Woo, T. and Lam, S. 1993. A semantic model for authentication protocols. In IEEE Computer Society Symposium on Research in Security and Privacy. 178--194."},{"key":"e_1_2_1_60_1","volume-title":"WS-Trust\/WS-SecureConversation Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/trustworkshop112003","author":"WS","year":"2002","unstructured":"WS 2002 . WS-Trust\/WS-SecureConversation Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/trustworkshop112003 .aspx. WS 2002. WS-Trust\/WS-SecureConversation Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/trustworkshop112003.aspx."},{"key":"e_1_2_1_61_1","volume-title":"WS-SecureConversation\/WS-Trust Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/TrustWorkshop Oct2004","author":"WS","year":"2004","unstructured":"WS 2004 . WS-SecureConversation\/WS-Trust Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/TrustWorkshop Oct2004 .aspx. WS 2004. WS-SecureConversation\/WS-Trust Interop Workshop. At http:\/\/msdn.microsoft.com\/webservices\/community\/workshops\/TrustWorkshop Oct2004.aspx."}],"container-title":["ACM Transactions on Information and System Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1237500.1237504","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1237500.1237504","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:52:07Z","timestamp":1750258327000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1237500.1237504"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,5]]},"references-count":61,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2007,5]]}},"alternative-id":["10.1145\/1237500.1237504"],"URL":"https:\/\/doi.org\/10.1145\/1237500.1237504","relation":{},"ISSN":["1094-9224","1557-7406"],"issn-type":[{"type":"print","value":"1094-9224"},{"type":"electronic","value":"1557-7406"}],"subject":[],"published":{"date-parts":[[2007,5]]},"assertion":[{"value":"2007-05-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}