loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
IEEE International Conference on Web Services (ICWS'06)
Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach
Chicago, Illinois, USA
September 18-September 22
ISBN: 0-7695-2669-1
Srinivas Padmanabhuni, Infosys Technologies Ltd., Bangalore, India.
Vineet Singh, Infosys Technologies Ltd., Bangalore, India.
K M Senthil Kumar, Infosys Technologies Ltd., Bangalore, India.
Abhishek Chatterjee, Infosys Technologies Ltd., Bangalore, India.
Today Web services have grown in context of both business to business (B2B) and business to customer (B2C) applications. Web services are the most popular mode of implementing Service Oriented Architecture (SOA). With this growth and acceptance in the industry, the role of security is crucial. Most of the existing security mechanisms in Web services like XML encryption[4], digital signatures[3], user tokens etc. provide security on one basic assumption that source of the request is legitimate. But a typical Denial of Service attacker can use these sources as reflectors and play around with the contents of a Web service body to create an attack scenario. In this paper, we propose PreSODoS - a framework to detect and prevent XML based Denial of Service (XDoS) attacks on Web services based applications. The framework relies on content introspection to detect any XDoS possibility. We use a Patricia Trie based representation so that the schemas and the request messages can be compared and validated in a performance efficient manner. PreSODoS is capable of detecting any repetitive request message and sense an attack scenario and trigger corresponding prevention mechanisms.
Citation:
Srinivas Padmanabhuni, Vineet Singh, K M Senthil Kumar, Abhishek Chatterjee, "Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach," icws, pp.577-584, IEEE International Conference on Web Services (ICWS'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.