Assessing the security of web service frameworks against Denial of Service attacks

Oliveira, Rui André; Laranjeiro, Nuno; Vieira, Marco

doi:10.1016/j.jss.2015.07.006

Cited by 12 publications

(8 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Possible attacks in Web services-based architecture have been discussed by Shahgholi et al (2011); Kaur and Kaur (2016) and Oliveira et al (2015). In Kaur and Kaur (2016), data analysis of Web services-based attacks is provided.…”

Section: Related Work and Discussionmentioning

confidence: 99%

Quantitative analysis of information leakage in service-oriented architecture-based Web services

Anjaria

Mishra

2017

View full text Add to dashboard Cite

Purpose Any computing architecture cannot be designed with complete confidentiality. As a result, at any point, it may leak the information. So, it is important to decide leakage threshold in any computing architecture. To prevent leakage more than the predefined threshold, quantitative analysis is helpful. This paper aims to provide a method to quantify information leakage in service-oriented architecture (SOA)-based Web services. Design/methodology/approach To visualize the dynamic binding of SOA components, first, the orchestration of components is modeled. The modeling helps to information-theoretically quantify information leakage in SOA-based Web services. Then, the paper considers the non-interference policy in a global way to quantify information leakage. It considers not only variables which interfere with security sensitive content but also other architectural parameters to quantify leakage in Web services. To illustrate the attacker’s ability, a strong threat model has been proposed in the paper. Findings The paper finds that information leakage can be quantified in SOA-based Web services by considering parameters that interfere with security sensitive content and information theory. A hypothetical case study scenario of flight ticket booking Web services has been considered in the present paper in which leakage of 18.89 per cent information is calculated. Originality/value The paper shows that it is practically possible to quantify information leakage in SOA-based Web services. While modeling the SOA-based Web services, it will be of help to architects to identify parameters which may cause the leakage of secret contents.

show abstract

Section: Related Work and Discussionmentioning

confidence: 99%

Quantitative analysis of information leakage in service-oriented architecture-based Web services

Anjaria

Mishra

2017

View full text Add to dashboard Cite

show abstract

“…Concerning the verification of the security rules, several researches tended to concentrate their efforts on the verification of security rules in order to detect errors, attacks or misconfigurations, such as redundancy, contradictions or collisions [4,5,6,14,15,16].…”

Section: Related Workmentioning

confidence: 99%

“…In [16], authors propose a multi-phase testing approach that allows to assess the security of service platforms against DoS attacks. However, these solutions could only be used before the deployment of the system.…”

Section: Related Workmentioning

confidence: 99%

A Framework for Testing and Monitoring Security Policies: Application to an Electronic Voting System

Toumi

Aouadi

Cavalli

et al. 2018

The Computer Journal

View full text Add to dashboard Cite

show abstract

“…[21] Define a Denial of Service attack as "an attempt to make a service unavailable to legitimate users." Another danger of DoS attacks, highlighted by [24] is that "The DOS attacks can cause severe damage to the interconnected systems such as web servers, database servers, cloud computing servers, etc."…”

Section: Api Securitymentioning

confidence: 99%

An Analysis of Security and Performance Concerns in Mobile Web Application Development: Challenges and Open Issues

Kunda

Chishimba

Mulenga

et al. 2017

Int. J. Recent Contrib. Eng. Sci. IT

View full text Add to dashboard Cite

Abstract-The paper focuses on security and performance concerns in mobile web development. The approach used in the study involved surveying journal publications to identify security and performance concerns. The paper highlights some of the contemporary issues currently being faced by application developers as they create, update and maintain mobile web applications including Cross-Site Scripting, Cookie hijacking/theft, location hijacking, history theft, behavior analysis, session hijacking, API design, security and the type of web server used considered.

show abstract

Assessing the security of web service frameworks against Denial of Service attacks

Cited by 12 publications

References 17 publications

Quantitative analysis of information leakage in service-oriented architecture-based Web services

Quantitative analysis of information leakage in service-oriented architecture-based Web services

A Framework for Testing and Monitoring Security Policies: Application to an Electronic Voting System

An Analysis of Security and Performance Concerns in Mobile Web Application Development: Challenges and Open Issues

Contact Info

Product

Resources

About