Is there any way to spoof trusted Web services metadata, like in cross-site scripting? And, if so, how do you guard against that?
Requires Free Membership to View
Replay, transaction insertion, out of order command processing and state modification are all examples of Web Services specific attacks that are opened up as part of a message/transaction driven architecture. Digital signatures, strong identities, sequence numbers, validity periods and encryption are all tools that can be used to mitigate such threats.
This was first published in September 2006
Join the conversationComment
Share
Comments
Results
Contribute to the conversation