@ijwsc

AN ONTOLOGY-BASED APPROACH FOR DETECTING SOAP MESSAGE ATTACKS

, and . International Journal on Web Service Computing (IJWSC), 9 (3/4): 01-13 (December 2018)
DOI: 10.5121/ijwsc.2018.9401

Abstract

An ontology-based detection approach aiming to check SOAP messages for XML rewriting attacks is presented. The approach comprises a SOAP message ontology and a set of policy filters. The ontology is used in preserving the message structure including its constituent elements and their relationships. The policy filters check if the message complies with denial-of-service vulnerability restrictions. Message integrity is preserved using the ontology-based checker, which checks that the message has not been modified during the transmission process. Message confidentiality is preserved by encrypting a copy of the message in a log file combined with the message. Time efficiency is achieved by executing the policy filters in a concurrent manner.

Links and resources

Tags