Friday, November 21, 2003

Soap attacks

Here's a Web Apps Security mailing list pointer to a white paper on basic attacks on SOAP. No, it's not discussing strange goings-on in the shower! SOAP is the Simple Object Access Protocol. It's used to overlay various services on top of HTTP allowing communications via XML.

The paper also describes defenses against those attacks.