Attack-tolerant security model for WS-security

摘要

WS-Security is an emerging standard for securing the web services. In this paper, we propose an attack-tolerant security model for WS-Security. This security model incorporates various features for WS-Security such as Time Stamp on SOAP message, parameter validation, etc. WS-Security has been implemented for online credit card transaction of a Web service. The various attacks on Web service and its countermeasures are discussed throughout this paper. The proposed security model has been designed with many essential design considerations. Hence, the proposed model makes the Web service an Attack-Tolerant Security Model.