A Self-Adaptive Approach to Ensure Integrity of SOAP Messages
Aziz Nasridinov, Jeong‐Yong Byun · 2012
Several Web Service Security (WS-Security) technologies are used to secure exchanges of SOAP messages in Web Service environment. However, although all of these security standards, SOAP message can still be vulnerable XML-based attacks. In order to deal with these types of attacks, in this paper, we propose a self-adaptive approach to ensure integrity of SOAP messages. In this approach, we first build SOAP message elements structure using ontology and then attach it in SOAP message header. If any changes in the pattern of attack are occurred, we learn them and save in a reliable storage. Also, in our approach, all modifications on SOAP messages are written to a log. Experiments show that the proposed solution has better performance in ensuring integrity of SOAP messages.