Research On Web Services Security Based On WS-Security Specification

With the rapid development of Web Services ,the security problem is increasingly conspicuous. In order to face the new challenges and threats to Web Services, specialists draft a lot of specifications to protect Web Services. Among these specifications ,WS-Security defines a complete security solution and provides secure interoperability across platforms and multi-language computer systems. In this way it can not only solve the inflexible problem that handling security problems should bind the requestor and the provider together but also ensure the Web Services application layer's security.This thesis first introduces and analyzes the grammar and regulations of WS-Security. Based on them , the main aspects and steps to secure Web Servicesare put forward by designing an example based on WS-Security-Online bankservices . Finally according to the result of the experiment, we can draw the conclusion that secure Web Services based on WS-Security can solve the Authentication problem and can ensure the confidentiality and integrity .