E-services security assessment model

Information security plays an extremely important role in e-services, as the e-services are vulnerable to various kinds of security and privacy threats on the Internet. The paper presents a formal model of e-services considering four different abstraction levels: application, middleware, operating system and network. Various security threats to e-services and security services to prevent these threats are described. The security level of e-services is determined by the weighted sum of security ratings of individual security services.