Dimensions of Network Security Planning For Web Services
Richard S. Swart, Bryan Marshall, Matthew E. Harris, Karen A. Forcht, David H. Olsen · Journal of Information Privacy and Security · 2005
Web Services technologies are gaining prominence in industry and are displacing established standards such as Electronic Data Interchange (EDI) for B2B transactions. The highly distributed nature of Web Services, and the tight tie between the network and application layers, creates new vulnerabilities requiring Information Security professionals to re-evaluate their network and application security planning. This paper reviews Web Services technologies, challenges to their implementation, demonstrates nine ways that traditional security best practices are inapplicable to Web Services, and suggests possible solutions to these problems.