Towards secure SOAP message exchange in a SOA

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2006, Pages 77-84

  Rahaman, Mohammad Ashiqur ^a   Schaad, Andreas ^a   Rits, Maarten ^a  

^a SAP RESEARCH   (France)

Author keywords

SOA; SOAP account; XML rewriting attack

Indexed keywords

MESSAGE INTEGRITY; MESSAGE STRUCTURES; MESSAGE-LEVEL SECURITY; POINT TO POINT; SOA; SOAP MESSAGES; STATE OF THE ART; SYSTEM INTEGRATION; WEB SERVICE SECURITY;

INFORMATION SERVICES; SECURITY OF DATA; SERVICE ORIENTED ARCHITECTURE (SOA); WEB SERVICES; XML;

MARKUP LANGUAGES;

EID: 77954319839     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180367.1180382     Document Type: Conference Paper

References (17)

1. Mohammad Ashiqur Rahaman., Rits Marten, Andreas Schaad, " An Inline Approach for Secure SOAP Requests and EarlyValidation" ,http://www.owasp. org/images/4/4b/AnInlineSOAPValidationApproach-MohammadAshiqurRahaman.pdf
2. http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message- security-L0.pdf
3. Bajaj, et al., Web Services Policy Framework (WS-Policy), September,2004,http://www.ibm.com/developerworks/library/specification/ ws-polfram
4. K. Bhargavan, C. Fournet, A. Gordon, and G. O'Shea An Advisor for Web Services Security Policies, http://research.microsoft.com/-adg/Publications/ details.htm#sws05
5. Microsoft Research; http://research.microsoft.com/projects/Samoa/
6. K. Bhargavan, C. Fournet, and A. D. Gordon. Verifying policy-based security for web services. In 11th ACM Conference on Computer and Communications Security (CCS'04), pages 268-277, October 2004. (Pubitemid 40338208)
7. T. Nadalin, ed., Web Services Security Policy Language (WS-SecurityPolicy), Version 1.0, 18 December 2002, http://www.verisign.com/wss/ WSSecurityPolicy.pdf
8. K. Bhargavan, C. Fournet, A. D. Gordon, and R. Pucella. TulaFale: A security tool for web services. In International Symposium on Formal Methods for Components and Objects (FMCO'03), LNCS. Springer, 2004
9. G. Della-Libera, M. Gudgin, P. Hallam-Baker, M. Hondo, H. Granqvist, C. Kaler, H. Maruyama, M. McIntosh, A. Nadalin, N. Nagaratnam, R. Philpott, H. Prafullchandra, J. Shewchuk, D. Walter, and R. Zolfonoon. Web services security policy language (WS-SecurityPolicy), July 2005. Version 1.1.
10. http://specs.xmlsoap.org/ws/2005/02/trust/WS-Trust.pdf
11. http://specs.xmlsoap.org/ws/2005/02/sc/WSSecureConversation.pdf
12. SOAP, http://www.w3.org/TR/soap/
13. Carlos Gutierrez, Eduardo Fernandez-Medina, Mario Piattini " Web Services Enterprise Security Architecture: A Case Study" http://delivery.acm.org/10.1145/1110000/1103025/p10-gutierrez.pdf?key1= 1103025&key2=9585273511&coll=ACM&dl=ACM&CFID= 15151515&CFTOKEN=6184618
14. G. Alonso and F. Casati and H. Kuno and V. Machiraju: Web Services: Concepts, Architectures and Applications, Springer-Verlag, 2004.
15. http://java.sun.com/developer/technicalArticles/WebServices/soa2/ SOATerms.html#soawhy
16. http://www.ietf.org/rfc/rfc2246.txt
17. http://www.ietf.org/rfc/rfc2818.txt