Protecting Database Centric Web Services against SQL/XPath Injection Attacks

Lecture Notes in Computer Science - Database and Expert Systems Applications ◽

10.1007/978-3-642-03573-9_22 ◽

2009 ◽

pp. 271-278 ◽

Cited By ~ 8

Author(s):

Nuno Laranjeiro ◽

Marco Vieira ◽

Henrique Madeira

Keyword(s):

Web Services ◽

Injection Attacks

Download Full-text

A Learning-Based Approach to Secure Web Services from SQL/XPath Injection Attacks

2010 IEEE 16th Pacific Rim International Symposium on Dependable Computing ◽

10.1109/prdc.2010.24 ◽

2010 ◽

Cited By ~ 3

Author(s):

Nuno Laranjeiro ◽

Marco Vieira ◽

Henrique Madeira

Keyword(s):

Web Services ◽

Injection Attacks

Download Full-text

Automated and effective testing of web services for XML injection attacks

Proceedings of the 25th International Symposium on Software Testing and Analysis - ISSTA 2016 ◽

10.1145/2931037.2931042 ◽

2016 ◽

Cited By ~ 10

Author(s):

Sadeeq Jan ◽

Cu D. Nguyen ◽

Lionel C. Briand

Keyword(s):

Web Services ◽

Injection Attacks

Download Full-text

Modeling and Mitigation of XPath Injection Attacks for Web Services Using Modular Neural Networks

Advances in Intelligent Systems and Computing - Recent Findings in Intelligent Computing Techniques ◽

10.1007/978-981-10-8639-7_31 ◽

2018 ◽

pp. 301-310 ◽

Cited By ~ 2

Author(s):

Gajendra Deshpande ◽

Shrirang Kulkarni

Keyword(s):

Neural Networks ◽

Web Services ◽

Modular Neural Networks ◽

Injection Attacks

Download Full-text

WS-Security on PRODML

ACMIT Proceedings ◽

10.33555/acmit.v1i1.16 ◽

2014 ◽

Vol 1 (1) ◽

pp. 9-34

Author(s):

Bobby Suryajaya

Keyword(s):

Web Services ◽

Digital Signature ◽

Data Transfer ◽

Web Services Security ◽

Soap Message ◽

Simulation Results ◽

End To End

SKK Migas plans to apply end-to-end security based on Web Services Security (WS-Security) for Sistem Operasi Terpadu (SOT). However, there are no prototype or simulation results that can support the plan that has already been communicated to many parties. This paper proposes an experiment that performs PRODML data transfer using WS-Security by altering the WSDL to include encryption and digital signature. The experiment utilizes SoapUI, and successfully loaded PRODML WSDL that had been altered with WSP-Policy based on X.509 to transfer a SOAP message.

Download Full-text