Research On Mechanism And Security Efficiency Of Information Interaction In SOA Based On Web Service

With the development of computer and network technology, Service-Oriented Architecture(SOA) has become the first choice of the architecture of application system, including financial economy, military Application, medical treatment, which has broader market and good prospects for development because of its cross-platform, loose coupling, and easy integration. Web Service has been used more and more widely, which is the best way to realize SOA. In order to achieve the purpose of easy extended and used, as the core protocol of Web Service interaction, SOAP’s security problem has not been too much to consider, which has also restricted the development of Web Service seriously. Traditional security measures can only guarantee point-to-point security at the transport layer, and it cannot fully meet the urgent demand for the safety application of Web Service, that presents a great challenge to the security of Web Service.Based on the research of Web service interaction in SOA, the mechanism of information security interaction based on Axis2 is put forward, aiming at the security problem of information interaction in SOA application system based on Web Service, facing the potential threat of attack on Web Service on the basis of analyzing the security and vulnerability of pivotal protocol in Web Service. The mechanism can not only realize the XML signature and XML encryption of SOAP message, but also can defense XML parameter tampering injection, Do S and XML external entity references. In the framework of Apache Axis2, the services of Application in SOA is applied typically and the security interaction model in Application simulation system based on SOA has been designed and realized. Based on the Application simulation system based on SOA with the security interaction safety mechanism performance test, the CPU and memory occupation of simulation system has been analyzed. The test has verified the effectiveness of the attack defense of SOA message security interaction mechanism based on Web Service.