Hacking Web Services

Description

Web Services are an integral part of next generation Web applications. The development and use of these services is growing at an incredible rate, and so too are the security issues surrounding them. Hacking Web Services is a practical guide for understanding Web services security and assessment methodologies. Written for intermediate-to-advanced security professionals and developers, the book provides an in-depth look at new concepts and tools used for Web services security. Beginning with a brief introduction to Web services technologies, the book discusses Web services assessment methodology, WSDL -- an XML format describing Web services as a set of endpoints operating on SOAP messages containing information -- and the need for secure coding. Various development issues and open source technologies used to secure and harden applications offering Web services are also covered. Throughout the book, detailed case studies, real-life demonstrations, and a variety of tips and techniques are used to teach developers how to write tools for Web services. If you are responsible for securing your company's Web services, this is a must read resource!

CONTENTS:

Preface, Section 1: Basics of Web Services and Security Threats; Chapter 1: Evolution of Web Applications and the Role of Web Services; Chapter 2:Web Services Components; Chapter 3: Threat Framework for Web Services; Chapter 4: Set of Technologies for Web Services; Section 2:Web Services Security Assessment (Hacking); Chapter 5:Web Services Assessment Methodology and Approaches; Chapter 6: Footprinting, Discover, and Public Search; Chapter 7:Web Services Enumeration, Profiling, and Invoking; Chapter 8:Web Services Attack Vectors and Threats; Section 3:Web Services Security Frame Work; Chapter 9:Web Services Defense by Deployment on Different Platforms, Chapter 10: Open Source Tools and Products; Chapter 11: Secure Coding for Web Services; Chapter 12: Developing Tools for Web Services Attacks and Defense; Section 4: Exhibits