Win a copy of Java Mock Exams (software) this week in the Programmer Certification (OCPJP) forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic

Web Service security

 
Mohit Singhal
Greenhorn
Posts: 4
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Can anybody tell me the security issues involved in web services.
And how to achive the security in Apache Axis.

thanks in advance-
Mohit!
 
Ulf Dittmer
Rancher
Posts: 42970
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
This page (which is part of the Axis documentation, but generally applicable) gives an nice overview of what to look out for, and how to protect against it.

Apart from that, Axis (and just about all other WS engines) are web apps, so all concepts and risks of web app security apply as well.

You might want to look into the WS-Security standard which adds security facilities to SOAP. It's available for Axis 1 as a library called WSS4J, and for Axis 2 as a module called Rampart.
 
Happiness is not a goal ... it's a by-product of a life well lived - Eleanor Roosevelt. Tiny ad:
the new thread boost feature: great for the advertiser and smooth for the coderanch user
https://coderanch.com/t/674455/Thread-Boost-feature
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!