It is our great pleasure and honor to welcome you to the First Workshop on Middleware Security (MidSec'08), held in Leuven, Belgium, on December 2, 2008, in association with the 9th ACM International Middleware Conference. We hope you will find the program interesting and that you will help us to make this event a major success by contributing to an engaging discussion.

Modern applications are increasingly built around middleware platforms supporting distributed programming paradigms. As new threats continuously emerge, security is a major concern in this context. The workshop aims at establishing a venue where the security and middleware communities can have a common, interactive forum for discussing and exchanging their views on these challenging topics.

The workshop attracted 13 submissions. Each paper was reviewed by three program committee members for originality and technical quality. As a result of that process, a selection of 6 full papers and 2 short papers has been accepted for publication in the ACM Digital Library.

Proceedings of the 2008 workshop on Middleware security

In this paper,we discuss the security issues faced by on-line tax returns systems and the new security requirements due to the introduction of the recently enacted electronic signature law which aims to provide a legal basis for electronic tran￣sactions.Our analysis suggests that the adoption of PKI for protecting electronic transactions will increase,and more organizations will establish their own PKI for policy and business reasons.As a result,interoperability of the many different PKIs will become a major barrier to the future and continuous development of on-line tax returns system.The paper proposes the use of a middleware approach,namely the Transaction Delivery Layer(TDL),for addressing the interoperability challenge.

Research on Interoperability of PKI in E-government Services

This paper analyse the security requirement of the Encrypted Electric Document Transmition System based on Spring,Hibernate and WebWork technic.By using USBKEY,security controls and electric seal technology,it provide effective authentication,access control,authorization, confidentiality,integrality and undeniable ability.

Studying the Security of Encrypted Electric Document Transmition

The security middleware is part of 'the integrated postal intranets secure system', but it is also useful without the other part of the secure system By a set of API, the security middleware can provide most secure services uniformly to multi-applications based on windows platform or Unix platform, such as data confidentiality, data integrity, non-repudiation and authenticationThe paper describes the architecture and concerned design of the security middleware 

Architecture and Design Practice of A Security Middleware

This article briefly analyses the security mechanisms of GSM and UMTS and finds the faults in themTo solve these faults,a mobile security middleware architecture in high strength based on end-to-end security mechanism is proposedThis article introduces the middleware architecture and its security mechanism,including the design of authentication and key agreement,discusses the encryption algorithm and the scheme of integrity control

Mobile Security Middleware Architecture in High Strength

Nowadays, with the awareness of information security, the security middleware technology is spread among an expanding number of people. On one hand, the security middleware can provide users with simple, understandable and safe information security technologies. On the other hand, it can exert positive effect on setting up a series of standardized and common interface for manufactures, so that the products from different vendors can be used compatibly. The paper firstly briefly introduced the structure of security middleware system, and on this basis, prospected some valuable applications. In addition, summarized and illustrated the hot spots in detail, including the implementation methods of parallel security middleware and vulnerability monitoring middleware. Finally, according to these significant applications, proposed some meaningful prospects related to research directions.

Sun Ying

Papers

A survey of security middleware