Hacking Web Services 1st Edition  (English, Mixed media product, Shah Shreeraj)

Web Services are an integral part of next generation Web applications. The development and use of these services is growing at an incredible rate, and so too are the security issues surrounding them. Hacking Web Services is a practical guide for understanding Web services security and assessment methodologies. Written for intermediate-to-advanced security professionals and developers, the book provides an in-depth look at new concepts and tools used for Web services security. Beginning with a brief introduction to Web services technologies, the book discusses Web services assessment methodology, WSDL -- an XML format describing Web services as a set of endpoints operating on SOAP messages containing information -- and the need for secure coding. Various development issues and open source technologies used to secure and harden applications offering Web services are also covered. Throughout the book, detailed case studies, real-life demonstrations, and a variety of tips and techniques are used to teach developers how to write tools for Web services. If you are responsible for securing your company's Web services, this is a must read resource!

Key Features

• Provides the only available single source that covers network security issues, attack methods, and mitigation options
• Explains general concepts, examples, and sample source code
• Uses only the most common network protocols for detailed examples
• Covers security issues as they apply to networking and network development

Table Of Contents

• Preface

Section 1:Basics of Web Services and Security Threats

• Evolution of Web applications and the role of Web services
• Web services components
• Threat framework for Web services
• Set of technologies for Web services

Section 2: Web Services Security Assessment (Hacking)

• Web services assessment methodology and approaches
• Footprinting, Discover, and Public Search
• Web Services Enumeration, Profiling, and Invoking
• Web Services Attack Vectors and Threats

Section 3: Web Services Security frame work

• Web services defense by deployment on different platforms
• Open source tools and products
• Secure coding for Web services
• Developing tools for Web services attacks and defense

Section 4: Exhibits