Preventing Service Oriented Denial of Service (PreSODoS): A proposed approach

Proceedings - ICWS 2006: 2006 IEEE International Conference on Web Services

Volumn , Issue , 2006, Pages 577-584

  Padmanabhuni, Srinivas ^a   Singh, Vineet ^a   Kumar, K M Senthil ^a   Chatterjee, Abhishek ^a  

^a INFOSYS TECHNOLOGIES LTD   (India)

Author keywords

Canonical XML; Denial of service; Patricia trie; Service oriented architecture; Web services; XDoS

Indexed keywords

ADMINISTRATIVE DATA PROCESSING; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; XML;

CANONICAL XML; DENIAL OF SERVICE; PATRICIA TRIE; SERVICE ORIENTED ARCHITECTURE;

WEB SERVICES;

EID: 38949108959     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2006.102     Document Type: Conference Paper

References (22)

1. SOAP 1.1, Specification Available at http://www.w3.org/TR/soap/
2. Secure Socket Layer (SSL), Available at http://en.wikipedia.org/wiki/ Secure_Sockets_Layer
3. XML -Signature, Specification Available at http://www.w3.org/TR/xmldsig- core/
4. XML- Encryption, Specification Available at http://www.w3.org/TR/xmlenc- core/
5. WS-Security, Specification Available at http://www.oasis-open.org/ committees/tc_home.php?wg_abbrev=wss
6. Security Assertions Markup Language (SAML), Specification Available at http://www.oasis-open.org/committees/tc_home.php ?wg_abbrev=security
7. Denial of Service (DOS), Available at http://en.wikipedia.org/wiki/ Denial_of_service
8. Denial of Service Attacks, Available at http://www.cert.org/tech_tips/ denial_of_service.html
9. Mark O'Neill, "XML and Web Services: Are We Secure Yet?" Available at http://www.ftponline.com/channels/security/javapro/2004_07/ magazine/features/moneill/default_pfaspx
10. XML Schema, Specification Available at http://www.w3 .org/TR/xmlschema-1/
11. SOAP Message with Attachments, Specification Available at http://www.w3.org/TR/2000/NOTE-SOAP-attachments-20001211
12. Unicode- XML, Specification Available at http://www.w3.org/TR/unicode- xml/
13. Bret Hartman,"Securing your Enterprise Web Services in a Suspicious world", SOA Web Services Journal, Available at http://webservices.sys-con. com/read/43958.htm
14. Mark Gibbs, "An XML firewall and more", Network World, March 04, Available at http://www.networkworld.com/newsletters/web/2004/031 5web2.html
15. "Protecting Networks from DoS Attacks and Malicious Traffic", Available at http://www. allot.com/pages/solutions_content. asp?intGlobalId=39
16. Rich Salz, "Essential XML Web Services Security Practices", Available at http://www.idealliance.org/papers/dx_xml03/papers/05-04-02/05-04- 02.pdf
17. Abstract Syntax Notation, Available at http://en.wikipedia.org/wiki/ Abstract_Syntax_Notation_l
18. Patricia Trie, Available at http://en.wikipedia.org/wiki/Patricia_trie 31/12/2005
19. Web Services Basic Security Profile 1.0, Specification Available at http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0.html
20. Steve Gibson, "The Strange Tale of the Denial of Service Attacks against GRCCOM", Gibson Research Corporation, Available at http://grc.com/dos/grcdos.htm
21. WS-I Basic Profile 1.0, Specification Available at http://www.ws-i.org/ Profiles/BasicProfile-1.0-2004-04-16.html
22. SOAP Message Transmission Optimization Mechanism, Specification Available at http://www.w3 .org/TR/soap 12-mtom/