A Formal Solution to Rewriting Attacks on SOAP Messages - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2008

A Formal Solution to Rewriting Attacks on SOAP Messages

Résumé

In Service Oriented Architecture Web Services, communication among services is banking on XML-Based messages, called SOAP messages. These messages are prone to attacks that are classified in literature as XML rewriting attacks. Since rewriting is a formal mechanism used in formal language theory, and the rewriting attack problem is designed under the framework of formal language theory, the solution also lies under the same framework. In this paper we propose a formal solution to XML rewriting attack on SOAP messages using regular tree grammar.To the best of our knowledge this is the first formal solution to this problem. We define current XML signatures used in a SOAP message as context-free signature. The formal solution proposed here is a context-sensitive XML signature. To address the additional requirements of SOAP extensibility model, where a SOAP message can pass through several intermediaries before reaching the final receiver, an adaptive variant of context-sensitive signature is also proposed. The solution addresses different forms of XML rewriting attacks. An analysis of the solution is also given in the paper.
Fichier non déposé

Dates et versions

hal-01511129 , version 1 (20-04-2017)

Identifiants

Citer

Sinha Smriti Kumar, Azzedine Benameur. A Formal Solution to Rewriting Attacks on SOAP Messages. ACM International Workshop on Secure Web Services, Oct 2008, Alexandria, United States. pp.53-60, ⟨10.1145/1456492.1456501⟩. ⟨hal-01511129⟩
108 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More