Web service protection
Mihailo Đorđević, Milan Pižurica, Vojkan R. Nikolić, Anja Kostić – Zobenica, Sanja Stanisavljev · 2018
Web services are the product of a new way of designing information systems. The spread of the idea of distributed data processing and the sharing of functionality with other organizations has led to the accelerated development of the web itself. Namely, organizations are no longer focused exclusively on the development of their own applications in order to promote or improve their own business. With a new methodology of development, those particular parts of their business open up the community and make it available to the general public. Web services have become a compulsory part of the business of almost every organization. However, the sharing of functionality means sharing its vulnerabilities and disadvantages. More specifically, the security vulnerabilities of a single service now have an impact on the operations of the organizations that use the service. Increasing the use of web services in everyday business increases the need for concrete methodologies for testing their security. There is currently no single methodology for testing the security of a web service that includes all possible scenarios, but there are certain suggested methodologies and recommended steps that facilitate the procedure of testing the service.