AN ONTOLOGY-BASED APPROACH FOR DETECTING SOAP MESSAGE ATTACKS
Mahmoud Hamouda, Rebhi S. Baraka · International journal of web service computing · 2018
An ontology-based detection approach aiming to check SOAP messages for XML rewriting attacks is presented.The approach comprises a SOAP message ontology and a set of policy filters.The ontology is used in preserving the message structure including its constituent elements and their relationships.The policy filters check if the message complies with denial-of-service vulnerability restrictions.Message integrity is preserved using the ontology-based checker, which checks that the message has not been modified during the transmission process.Message confidentiality is preserved by encrypting a copy of the message in a log file combined with the message.Time efficiency is achieved by executing the policy filters in a concurrent manner.