Secure Framework for Web Services Communication
Jitender Tanwar, Sanjay Kumar Sharma, Mandeep Mittal · 2018
Business is growing with internet communication. Web services are the main building blocks of communication over the internet. The communication framework of web services uses technologies like WSDL, UDDI, SOAP etc. The increasing demand for faster and secure communication through web services needs to use more secure and efficient framework. Web services communication framework suffers from many security issues. The security can be breached at the WSDL level, UDDI level, SOAP level and HTTP level. The SOAP level threats are very common and dangerous for web services communication. SOAP is the XML based standard message format used for communication between inter-operable distributed applications. The SOAP messages are vulnerable to many threats. The XML injection attack is one of the major threat that can severely affect web services communication. We proposed a dependency tree based web services communication framework that can detect and handle XML injection attack. The framework includes generation of the dependency tree, detection of XML injection attack using dependency tree and handling the attack using a designed filter. The designed framework will be secure and more efficient.