IEEE International Conference on Web Services (ICWS 2007) A Stateful Web Service Firewall for BPEL Salt Lake City, Utah, USA July 09-July 13 ISBN: 0-7695-2924-0
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICWS.2007.173
Today, the Business Process Execution Language (BPEL) is the most emerging specification for Web Service Composition, which is an important part of the SOA paradigm. Defining a stateful communication protocol, BPEL enables potential for new security vulnerabilities. In this paper, we present a severe Denial-of-Service attack on a leading BPEL engine, illustrating new threats on availability in the context of BPEL. Derived from our observations, we developed a protection concept and implemented an application level firewall fending these types of attacks.
Citation:
Nils Gruschka, Meiko Jensen, Norbert Luttenberger, "A Stateful Web Service Firewall for BPEL," icws, pp.142-149, IEEE International Conference on Web Services (ICWS 2007), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb