IEEE International Conference on Web Services (ICWS 2007)
A Stateful Web Service Firewall for BPEL
Salt Lake City, Utah, USA
July 09-July 13
ISBN: 0-7695-2924-0
DOI Bookmark:
http://doi.ieeecomputersociety.org/10.1109/ICWS.2007.173
Today, the Business Process Execution Language (BPEL) is the most emerging specification for Web Service Composition, which is an important part of the SOA paradigm. Defining a stateful communication protocol, BPEL enables potential for new security vulnerabilities. In this paper, we present a severe Denial-of-Service attack on a leading BPEL engine, illustrating new threats on availability in the context of BPEL. Derived from our observations, we developed a protection concept and implemented an application level firewall fending these types of attacks.
Citation:
Nils Gruschka, Meiko Jensen, Norbert Luttenberger, "A Stateful Web Service Firewall for BPEL," icws, pp.142-149, IEEE International Conference on Web Services (ICWS 2007), 2007
Usage of this product signifies your acceptance of the
Terms of Use.
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||