Web Services Security

Abstract

During the past few years, significant standardization work in the Web services (WS) technology area has been performed. As a consequence of these initial efforts, WS foundational stable specifications have already been delivered. Now, it is time for the industry to standardize and address the security issues that have emerged from this paradigm. Up until now, much activity has been carried out on this subject. In this chapter, we will specify the main security services that have to be addressed in the WS world as well as a description of the aspects already addressed and unaddressed. We will mention the main initiatives and their respective specifications that try to cover the distinct security issues within the WS outlook. Whenever possible, unaddressed security issues for each topic will be stated. In addition, current general security concerns will be detailed, and future research will be proposed.