XML Security — A Comparative Literature Review
---
paper_title: Hands-on, simulated, and remote laboratories: A comparative literature review

paper_content:

Laboratory-based courses play a critical role in scientific education. Automation is changing the nature of these laboratories, and there is a long-running debate about the value of hands-on versus simulated laboratories. In addition, the introduction of remote laboratories adds a third category to the debate. Through a review of the literature related to these labs in education, the authors draw several conclusions about the state of current research. The debate over different technologies is confounded by the use of different educational objectives as criteria for judging the laboratories: Hands-on advocates emphasize design skills, while remote lab advocates focus on conceptual understanding. We observe that the boundaries among the three labs are blurred in the sense that most laboratories are mediated by computers, and that the psychology of presence may be as important as technology. We also discuss areas for future research.
---
paper_title: Broker-based secure negotiation of intellectual property rights

paper_content:

In the area of e-commerce of multimedia content, protection and management of Intellectual Property Rights (IPR) is a key issue. Using a broker as intermediary between copyrighted material purchasers and content providers helps, apart from increasing the market perspectives, to improve the way of handling the IPR aspects. The conditions in which multimedia content is sold may vary from one case to another, especially in a B2B environment. For this reason, negotiation of copyright conditions at the purchase moment is to become more and more important.We are developing an application that represents IPR information using metadata and uses a specific protocol for negotiation purposes. All of this in a broker-based multimedia content e-commerce system. We are also experimenting with the use of agent technology to implement the negotiation protocol. The result of the negotiation is an electronic contract, that should be signed by the interested parties. Apart form specifying this data structure, we are working in the integration of an electronic signature mechanism using the XML Signature specification.
---
paper_title: Evaluation of certificate validation mechanisms

paper_content:

In this article we evaluate different certificate validation mechanisms to be possibly used within the Wireless Public Key Infrastructure (W-PKI). An implementation of a standard compliant signed content application offering full PKI functionality served as means for evaluating different mechanisms. We compared short-lived certificates, Certificate Revocation Lists (CRLs), the Online Certificate Status Protocol (OCSP) and the XML Key Management Specification (XKMS) with regard to security, interoperability, complexity and performance in terms of size and scalability. The evaluation has lead to propose OCSP for delegated certificate validation. It has to be pointed out though, that OCSP should be enhanced with full delegation capabilities, such as the ones offered by XKMS.
---
paper_title: Development of XKMS-Based Service Component for Using PKI in XML Web Services Environment

paper_content:

The emerging Web Services technology provides a systematic and standard-based approach to enable application-to-application integration. In this paper, we propose XKMS(XML Key Management Specification)-based key management service model and design protocol component based on standard specification. Also describes the analysis and security method of key management service for secure global XML Web Services, paying attention to the features of XML based security service. This service model offers the security construction guideline for future e-business and global XML Web Services frameworks.
---
paper_title: A stream-based implementation of XML encryption

paper_content:

W3C has been working on the standardization of XML Encryption and released its specification as a W3C Proposed Recommendation in 2002. There are several implementations of the specification, all of which are implemented using DOM. However, it is commonly accepted that DOM has higher costs in time and space than other APIs. Also, even if SAX is used, with this kind of API, it is impossible to parse decrypted data both efficiently and correctly. Therefore, we thought of using the Xerces Native Interface (XNI) of Xerces2. Using this API, we prototyped a stream-based implementation of the specification. We also evaluated its performance. As compared with a DOM-based implementation, it achieves a 0.27%--26% reduction in processing time (i.e., 1.0x-1.3x performance) for encryption of XML documents with sizes larger than 2 KB, and 34%-88% (i.e., 1.5x-8.5x) for decryption of XML documents with any sizes.
---
paper_title: A streaming validation model for SOAP digital signature

paper_content:

The XML signature specification provides a rich and flexible message signature model for XML documents, and it has been adopted by SOAP applications to provide message-level security. However, the XML signature design introduces a number of complex processing steps, such as canonicalization and XPath filtering, that often lead to performance and scalability problems when encountering extremes of size and rate in the processing of XML. In this paper, we focus on the performance of validating large signed XML messages, as might be sent by a scientific application using grid Web services. We present the design and implementation of the GHPX/SSSV system for the streaming validation of SOAP digital signature. Our model consists of a streaming canonicalization and optimized SOAP signature validation. We present an empirical study of the performance characteristics of these streaming validation features. Based on our evaluations we conclude that the streaming validation model can not only provide high performance, but is also memory efficient.
---
paper_title: A quick XML parser for extracting signatures of secure Web services

paper_content:

Signatures of SOAP/XML messages were necessary to enforce the security. This paper proposes an approach to accelerate the process of validating signatures of Web service calls. We developed a quick XML parser (QXP). The QXP is motivated by Xerces, but QXP outperforms Xerces ranging from 7 to 21 times speedup in the two benchmark programs.
---
paper_title: An efficient software-based security acceleration methods for open LBS services

paper_content:

Location-based services refers to value-added service by processing information utilizing mobile user location. With the rapidly increasing wireless Internet subscribers and world LBS market, the various location based applications are introduced such as buddy finder, proximity and security services. As the killer application of the wireless Internet, the LBS has reconsidered technology about location determination technology, LBS middleware server for various application, and diverse contents processing technology. However, there are fears that this new wealth of personal location information will lead to new security risks, and invasion of the privacy of people and organizations. In this paper, we suggest security acceleration methods for fast open LBS using XML signcryption mechanism. And proposed secure LBS security protocols allows a client to offload mobile certificate handling to the server and to enable the central administration of privacy policies. The idea is to create a signcryption technique for software based XML signature acceleration.
---
paper_title: Development of an e-Diagnostics/Maintenance framework for semiconductor factories with security considerations

paper_content:

Abstract In recent years, the concept of e-Diagnostics and e-Maintenance is proposed in the semiconductor industry. By using Internet and information technologies, e-Diagnostics and e-Maintenance intend to provide equipment specialists with the remote capabilities of connectivity, manipulation, configuration, performance monitoring, and data collection and analysis on equipment to achieve the goal of promptly diagnosing, repairing, and maintaining equipment. In this paper, new-generation information software technologies and object-oriented technologies, such as Web Services, XML signature, XML encryption, UML, etc. are used to develop an e-Diagnostics/Maintenance framework with security considerations. The proposed framework can achieve the automaton of diagnostic processes and the integration of diagnostics and maintenance information under a secure communication infrastructure.
---
paper_title: XML-signcryption based LBS security protocol acceleration methods in mobile distributed computing

paper_content:

This paper describes the open security architecture for LBS (Location- based Services) platform ensuring interoperability among the wireless networks and various location-based application services and the functional security requirements for the LBS platform. The goal of this paper is to investigate how well the most limited wireless devices can make use of LBS security services. In this paper, we suggest security acceleration methods for high speed open LBS using XML signcryption mechanism. And proposed secure LBS security protocols allows a client to offload mobile certificate handling to the server and to enable the central administration of privacy polices. The idea is to create a signcryption technique for software based XML signature acceleration.
---
paper_title: Evaluation of certificate validation mechanisms

paper_content:

In this article we evaluate different certificate validation mechanisms to be possibly used within the Wireless Public Key Infrastructure (W-PKI). An implementation of a standard compliant signed content application offering full PKI functionality served as means for evaluating different mechanisms. We compared short-lived certificates, Certificate Revocation Lists (CRLs), the Online Certificate Status Protocol (OCSP) and the XML Key Management Specification (XKMS) with regard to security, interoperability, complexity and performance in terms of size and scalability. The evaluation has lead to propose OCSP for delegated certificate validation. It has to be pointed out though, that OCSP should be enhanced with full delegation capabilities, such as the ones offered by XKMS.
---
paper_title: Performance comparison of security mechanisms for grid services

paper_content:

Security is one of the most important features for grid services. There are several specifications used to add security to grid services, and some of them have been implemented and are in use. However, since most of the security mechanisms involve slow XML manipulations, adding security to grid services introduces a big performance penalty. In this paper, we introduce various security mechanisms and compare their features and performance. Our evaluation shows that transport level security (SSL) is faster than message level security, and should be used if there is no special requirement to use message level security. For message level security, WS-SecureConversation is generally fast, but has a scalability problem.
---
paper_title: Evaluation of certificate validation mechanisms

paper_content:

In this article we evaluate different certificate validation mechanisms to be possibly used within the Wireless Public Key Infrastructure (W-PKI). An implementation of a standard compliant signed content application offering full PKI functionality served as means for evaluating different mechanisms. We compared short-lived certificates, Certificate Revocation Lists (CRLs), the Online Certificate Status Protocol (OCSP) and the XML Key Management Specification (XKMS) with regard to security, interoperability, complexity and performance in terms of size and scalability. The evaluation has lead to propose OCSP for delegated certificate validation. It has to be pointed out though, that OCSP should be enhanced with full delegation capabilities, such as the ones offered by XKMS.
---
paper_title: A XKMS-Based Security Framework for Mobile Grid into the XML Web Services

paper_content:

Mobile Grid, or Wireless Grid Services refers to value-added Grid Service by processing in Mobile environment. Besides Mobile Internet the traditional Internet computing is experiencing a conceptual shift from Client-Server model to Grid and Peer-to-Peer computing models. As these trends, Mobile Internet and the Grid, are likely to find each other the resource constraints that Wireless devices pose today affect the level of interoperability between them. The goal of this paper is to investigate how well the most limited Wireless devices can make use of Grid Security Services. This paper describes a novel security approach on Mobile Grid Services to validate certificate based on current Mobile XML Web Services Platform environment using XKMS (XML Key Management Specification) and SAML (Security Assertion Markup Language), XACML (extensible Access Control Markup Language) in XML Security mechanism.
---
paper_title: Development of XKMS-Based Service Component for Using PKI in XML Web Services Environment

paper_content:

The emerging Web Services technology provides a systematic and standard-based approach to enable application-to-application integration. In this paper, we propose XKMS(XML Key Management Specification)-based key management service model and design protocol component based on standard specification. Also describes the analysis and security method of key management service for secure global XML Web Services, paying attention to the features of XML based security service. This service model offers the security construction guideline for future e-business and global XML Web Services frameworks.
---
paper_title: An efficient software-based security acceleration methods for open LBS services

paper_content:

Location-based services refers to value-added service by processing information utilizing mobile user location. With the rapidly increasing wireless Internet subscribers and world LBS market, the various location based applications are introduced such as buddy finder, proximity and security services. As the killer application of the wireless Internet, the LBS has reconsidered technology about location determination technology, LBS middleware server for various application, and diverse contents processing technology. However, there are fears that this new wealth of personal location information will lead to new security risks, and invasion of the privacy of people and organizations. In this paper, we suggest security acceleration methods for fast open LBS using XML signcryption mechanism. And proposed secure LBS security protocols allows a client to offload mobile certificate handling to the server and to enable the central administration of privacy policies. The idea is to create a signcryption technique for software based XML signature acceleration.
---
paper_title: XML-signcryption based LBS security protocol acceleration methods in mobile distributed computing

paper_content:

This paper describes the open security architecture for LBS (Location- based Services) platform ensuring interoperability among the wireless networks and various location-based application services and the functional security requirements for the LBS platform. The goal of this paper is to investigate how well the most limited wireless devices can make use of LBS security services. In this paper, we suggest security acceleration methods for high speed open LBS using XML signcryption mechanism. And proposed secure LBS security protocols allows a client to offload mobile certificate handling to the server and to enable the central administration of privacy polices. The idea is to create a signcryption technique for software based XML signature acceleration.
---
paper_title: A stream-based implementation of XML encryption

paper_content:

W3C has been working on the standardization of XML Encryption and released its specification as a W3C Proposed Recommendation in 2002. There are several implementations of the specification, all of which are implemented using DOM. However, it is commonly accepted that DOM has higher costs in time and space than other APIs. Also, even if SAX is used, with this kind of API, it is impossible to parse decrypted data both efficiently and correctly. Therefore, we thought of using the Xerces Native Interface (XNI) of Xerces2. Using this API, we prototyped a stream-based implementation of the specification. We also evaluated its performance. As compared with a DOM-based implementation, it achieves a 0.27%--26% reduction in processing time (i.e., 1.0x-1.3x performance) for encryption of XML documents with sizes larger than 2 KB, and 34%-88% (i.e., 1.5x-8.5x) for decryption of XML documents with any sizes.
---
paper_title: A streaming validation model for SOAP digital signature

paper_content:

The XML signature specification provides a rich and flexible message signature model for XML documents, and it has been adopted by SOAP applications to provide message-level security. However, the XML signature design introduces a number of complex processing steps, such as canonicalization and XPath filtering, that often lead to performance and scalability problems when encountering extremes of size and rate in the processing of XML. In this paper, we focus on the performance of validating large signed XML messages, as might be sent by a scientific application using grid Web services. We present the design and implementation of the GHPX/SSSV system for the streaming validation of SOAP digital signature. Our model consists of a streaming canonicalization and optimized SOAP signature validation. We present an empirical study of the performance characteristics of these streaming validation features. Based on our evaluations we conclude that the streaming validation model can not only provide high performance, but is also memory efficient.
---
paper_title: A quick XML parser for extracting signatures of secure Web services

paper_content:

Signatures of SOAP/XML messages were necessary to enforce the security. This paper proposes an approach to accelerate the process of validating signatures of Web service calls. We developed a quick XML parser (QXP). The QXP is motivated by Xerces, but QXP outperforms Xerces ranging from 7 to 21 times speedup in the two benchmark programs.
---
paper_title: A XKMS-Based Security Framework for Mobile Grid into the XML Web Services

paper_content:

Mobile Grid, or Wireless Grid Services refers to value-added Grid Service by processing in Mobile environment. Besides Mobile Internet the traditional Internet computing is experiencing a conceptual shift from Client-Server model to Grid and Peer-to-Peer computing models. As these trends, Mobile Internet and the Grid, are likely to find each other the resource constraints that Wireless devices pose today affect the level of interoperability between them. The goal of this paper is to investigate how well the most limited Wireless devices can make use of Grid Security Services. This paper describes a novel security approach on Mobile Grid Services to validate certificate based on current Mobile XML Web Services Platform environment using XKMS (XML Key Management Specification) and SAML (Security Assertion Markup Language), XACML (extensible Access Control Markup Language) in XML Security mechanism.
---
paper_title: Security on MASs with XML Security Specifications

paper_content:

In the past, multi-agent systems were used in proprietary environments. Nowadays, these systems have been used broadly in open distributed networks, such as e-commerce applications for Internet. An environment such as the Internet cannot be considered a safe place. Thus, multi-agent systems should have security mechanisms, e.g. confidentiality and integrity. The XML security specifications are standards that are based on XML and provide security mechanisms. They include: XML digital signature for digital signature; XML encryption for cryptography; XML key management specification for public key infrastructure. Agents may use a FIPA (foundation for intelligent physical agents) standard called RDF(resource description framework), which is a message content standard in XML language. Using this standard, agents can communicate exchanging XML messages, but these messages are not secure. In this article, we propose a secure communication model for agents based on RDF and the XML security specifications
---

Title: XML Security — A Comparative Literature Review

Section 1: Introduction
Description 1: Provide an overview of XML Security and its relevance in various application areas and discuss the goal of the literature review.

Section 2: Methodology
Description 2: Describe the methods and criteria used to select and analyze the literature on XML Security.

Section 3: Hypotheses and Analysis
Description 3: Present and discuss the a priori hypotheses formulated and the findings from the literature review that support or refute these hypotheses.

Section 4: Observations
Description 4: Summarize the key observations from the literature, including issues such as performance inefficiencies, security vulnerabilities, and the use of XML Security in various contexts.

Section 5: Discussion
Description 5: Discuss the implications of the findings, including the challenges and potential areas for future research in XML Security.

Section 6: Conclusion
Description 6: Summarize the main conclusions of the literature review and the anticipated future impact of XML Security.

Section 7: Acknowledgment
Description 7: Acknowledge the funding and support received for the research work.