OMOS: A framework for secure communication in mashup applications

TY - JOUR

T1 - OMOS

T2 - 24th Annual Computer Security Applications Conference, ACSAC 2008

AU - Zarandioon, Saman

AU - Yao, Danfeng

AU - Ganapathy, Vinod

PY - 2008

Y1 - 2008

N2 - Mashups are new Web 2.0 applications that seamlessly combine contents from multiple heterogeneous data sources into one integrated browser environment. The hallmark of these applications is to facilitate dynamic information sharing and analysis, thereby creating a more integrated and convenient experience for end-users. As mashups evolve into portals designed to offer convenient access to information on critical domains, such as banking, shopping, investment, enterprise mashups, and web desktops, concerns to protect clients' personal information and trade secrets become important, thereby motivating the need for strong security guarantees. We develop a security architecture that provides high assurance on the mutual authentication, data confidentiality, and message integrity of mashup applications. In this paper, we describe the design and implementation of OpenMashupOS (OMOS), an open-source browser-independent framework for secure inter-domain communication and mashup development.

AB - Mashups are new Web 2.0 applications that seamlessly combine contents from multiple heterogeneous data sources into one integrated browser environment. The hallmark of these applications is to facilitate dynamic information sharing and analysis, thereby creating a more integrated and convenient experience for end-users. As mashups evolve into portals designed to offer convenient access to information on critical domains, such as banking, shopping, investment, enterprise mashups, and web desktops, concerns to protect clients' personal information and trade secrets become important, thereby motivating the need for strong security guarantees. We develop a security architecture that provides high assurance on the mutual authentication, data confidentiality, and message integrity of mashup applications. In this paper, we describe the design and implementation of OpenMashupOS (OMOS), an open-source browser-independent framework for secure inter-domain communication and mashup development.

UR - http://www.scopus.com/inward/record.url?scp=60649094297&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=60649094297&partnerID=8YFLogxK

U2 - https://doi.org/10.1109/ACSAC.2008.25

DO - https://doi.org/10.1109/ACSAC.2008.25

M3 - Conference article

SN - 1063-9527

SP - 355

EP - 364

JO - Proceedings - Annual Computer Security Applications Conference, ACSAC

JF - Proceedings - Annual Computer Security Applications Conference, ACSAC

M1 - 4721572

Y2 - 8 December 2008 through 12 December 2008

ER -