Web services have gained high popularity in the development of distributed application systems. Some critical applications also consider using web services paradigm due to the benefits of interoperability, reusability, and adaptability. To support critical applications, existing web service model needs to be extended to assure survivability. In this paper, we introduce the design of a novel survivable Web service (SWS) framework that supports continuous operation even in the presence of failures and security attacks. The replication scheme and N-Modular Redundancy (NMR) concept are used as the basis for achieving survivability. Due to replication, communication among multiple web services becomes costly. We develop protocols, including the Inter-Group Communication (SWS-IGC) and Message Ordering (SWS-MO) protocols, to guarantee efficient and correct communication. Preliminary performance studies show that the SWS framework only incurs a moderate overhead due to the incorporation of survivability assurance.