loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
IEEE International Conference on Web Services (ICWS 2007)
A Stateful Web Service Firewall for BPEL
Salt Lake City, Utah, USA
July 09-July 13
ISBN: 0-7695-2924-0
Nils Gruschka, Communication Systems Research Group, Germany
Meiko Jensen, Communication Systems Research Group, Germany
Norbert Luttenberger, Communication Systems Research Group, Germany
Today, the Business Process Execution Language (BPEL) is the most emerging specification for Web Service Composition, which is an important part of the SOA paradigm. Defining a stateful communication protocol, BPEL enables potential for new security vulnerabilities. In this paper, we present a severe Denial-of-Service attack on a leading BPEL engine, illustrating new threats on availability in the context of BPEL. Derived from our observations, we developed a protection concept and implemented an application level firewall fending these types of attacks.
Citation:
Nils Gruschka, Meiko Jensen, Norbert Luttenberger, "A Stateful Web Service Firewall for BPEL," icws, pp.142-149, IEEE International Conference on Web Services (ICWS 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.