A Portable Interceptor Mechanism on SOAP for Continuous Audit

Abstract

Web services has become popular in modern distributed applications, and the SOAP technology currently is the most used in Web services. Recent middleware research works widely use interception approach for many problem domains, for example fault tolerance, continuous audit {CA), security etc. Instead of providing a portable interceptor as CORBA does, SOAP 1.2 provides an intermediary mechanism. Due to backward compatibility issue, we found intermediary mechanism is not a feasible solution for interception. Furthermore, our use case analysis found that CORBA Portable Interceptor functionality does not fulfill all requirements of continuous audit. This motivates us to develop a new portable interceptor mechanism (PIM) on SOAP for CA. In this paper, we propose a PIM on SOAP to meet the interception requirements for Web services. Our PIM includes portable interceptor management in SOAP engine and portable interceptor interface definitions.