Flooding attack issues of Web Services and service-oriented architectures

INFORMATIK 2008 - Beherrschbare Systeme - Dank Informatik, Beitrage der 38. Jahrestagung der Gesellschaft fur Informatik e.V. (GI)

Volumn 1, Issue , 2008, Pages 117-122

  Jensen, Meiko ^a   Gruschka, Nils ^b  

^a UNIVERSITY OF KIEL   (Germany)

^b NEC LABORATORIES EUROPE   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

DENIAL OF SERVICE; ELECTRONIC BUSINESS; FLOODING ATTACKS; FLOODINGS; SECURITY CONSIDERATIONS; SECURITY ISSUES; SECURITY THREATS; SERVICE COMPOSITIONS;

FLOODS; INFORMATION SERVICES; SERVICE ORIENTED ARCHITECTURE (SOA); WEBSITES;

WEB SERVICES;

EID: 84874262832     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. Johann Bizer, Rüdiger Grimm, Steffen Staab, Sebastian Meissner, Daniel Pähler, Christoph Ringelstein, Martin Rost, Jan Schallabök, and Felix Schwagereit. SOAinVO - Chancen und Risiken von Service-orientierten Architekturen in Virtuellen Organisationen. 2007.
2. Bill Brenner. Estonian attacks were a cyber riot, not warfare. Black Hat, 2007.
3. Nils Gruschka, Meiko Jensen, and Norbert Luttenberger. A Stateful Web Service Firewall for BPEL. Proceedings of the IEEE International Conference on Web Services (ICWS 2007), 2007.
4. Nils Gruschka and Norbert Luttenberger. Protecting Web Services from DoS Attacks by SOAP Message Va lidation. In Proceedings of the IFIP TC-11 21. International Information Security Conference (SEC 2006), 2006.
5. Sebastian Gajek, Lijun Liao, and Jörg Schwenk. Breaking and fixing the inline approach. In SWS '07: Proceedings of the 2007 ACM workshop on Secure web services, pages 37-43, New York, NY, USA, 2007. ACM.
6. Meiko Jensen, Nils Gruschka, Ralph Herkenhöner, and Norbert Luttenberger. SOA and Web Services: New Technologies, New Standards - New Attacks. In Proceedings of the 5th IEEE European Conference on Web Services, 2007.
7. Meiko Jensen, Nils Gruschka, and Norbert Luttenberger. The Impact of Flooding Attacks on Network-based Services. In Proceedings of the IEEE International Conference on Availability, Reliability and Security, 2008.
8. Lutz Lowis, Sebastian Höhn, and Maike Gilliot. Vulnerability Effect Propagation in Service-Oriented Architectures. GI Sicherheit, 2008.
9. Michael McIntosh and Paula Austel. XML signature element wrapping attacks and countermeasures. In SWS '05: Proceedings of the 2005 workshop on Secure web services, pages 20-27, New York, NY, USA, 2005. ACM Press.
10. Michael McIntosh, Martin Gudgin, K. Scott Morrison, and Abbie Barbir. Basic Security Profile Version 1.0. Web Services Interoperability Organization (WS-I), 2007.
11. C. Matthew MacKenzie, Ken Laskey, Francis McCabe, Peter F Brown, and Rebekah Metz. Reference Model for Service Oriented Architecture 1.0. OASIS Committee Specification, 2006.
12. Jose Nazario. Estonian DDoS Attacks - A summary to date. Arbor Networks Security Blog, May 2007.
13. Adam Smith. Estonia: Under Siege on the Web. Time Magazine, 2007.
14. Anoop Singhal, Theodore Winograd, and Karen Scarfone. Guide to Secure Web Services. Recommendations of the National Institute of Standards and Technology (NIST), Special Publication 800-95, 2007.
15. Sanjiva Weerawarana, Francisco Curbera, Frank Leymann, Tony Storey, and Donald F. Ferguson. Web Services Platform Architecture: SOAP, WSDL, WS-Policy, WS-Addressing, WS-BPEL, WS-Reliable Messaging, and More. Prentice Hall PTR, 2005.