Towards more secure web services - Exploiting and analysing XML signature security issues
Tomáš Knap, Irena Mlynkova · 2009
The aim of this paper is to analyze the current security issues of XML Signature - a W3C Recommendation, which is used as a key part of the process of ensuring web services integrity. After introducing the necessary terminology, the problematic issues of the XML Signature W3C Recommendation are divided into several areas, inspected, and the solutions are described and compared. If an appropriate solution does not exist, or is not yet fully standardized, it is marked as an open problem and the solution is proposed.