The poor performance of WS-Security (WSS) processing is often a topic of concern and prevents its wider adoption. We focused on byte-level similarities in WSS messages and implemented a template-based WSS processor. Inside the processor an automaton is employed that matches the incoming messages and extracts signature values and/or encrypted values. WSS operations including XML Canonicalization are performed against the extracted values, without costly XML parsing and traversal. This is more than twice as fast as the DOM-based WSS processor and our prior work with a stream-based processor.
Index Terms:
Web services, WS-Security, performance
Citation:
Satoshi Makino, Michiaki Tatsubori, Kent Tamura, Yuichi Nakamura, "Improving WS-Security Performance with a Template-Based Approach," icws, pp.581-588, IEEE International Conference on Web Services (ICWS'05), 2005