Research of the Security Strategy of Web Service
Rui Na Pan · Modern Computer · 2003
Web Service has become the new platform of creating inter-ope rational distributed applications. How to enhance its security is also becoming the hotspot and key technol ogy of developing Web Service. There is not a uniform standard of Web Service security mechanism so far. This paper discusses and concludes the security technology of Web Service. After analyzing the structure of Web Service security system, it puts forward three sorts of security method: system level method, third party method, and application lev el method. Two kinds of application level method is put forward : inner authentication and SOAP header based authenti cation. A practical solution and its source code is also provided. In the end, this paper discusses the ″circle calling ″ attack, and two points of advice are given.