Firewalls White Papers
WS-SecurityPolicy Decision and Enforcement for Web Service Firewalls
Overview A known weakness of Web Services is their vulnerability to Denial of Service attacks exploiting XML processing characteristics. To protect Web Services from these attacks, extended validation of SOAP messages - considering WS-Security and WS-securityPolicy - is made. For SOAP security is message oriented, the processing of the security content itself is vulnerable to Denial of Service attacks. Hence, it is necessary to combine WS-Security processing and DoS protection. This paper presents the solution for WS-SecurityPolicybased policy decision within Web Service Firewalls. For this, a technical description and an algorithm is given addressing major parts of policy decision, as well as a proposal for enhancing message signature identification. Further, the paper argues for advancing protection of Web Services by improved policy enforcement.
| Publisher | Christian-Albrechts-Universitat zu Kiel | File Format | |
|---|---|---|---|
| Date Published | September 2006 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSBalancing Security Against Productivity
DownloadWhat makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Automated Solution Overhauls Tumbleweed Communications’ Software Updating Process
Download this case study from Macrovision to read about Tumbleweed Communications’ success using Macrovision’s FLEXnet Publisher Update Service Module, a Web-based service that proactively delivers software patches, updates, and other...
HP OpenView Operations OVO Firewall Configuration White Paper
This document describes how to setup and configure OVO in a firewall environment. It describes what steps need to be performed on the OVO management server and on the firewall...
