Det-V: a tool for attack detection in Web services

• Grant number: 11/19010-0
• Support Opportunities: Scholarships in Brazil - Scientific Initiation
• Start date: December 01, 2011
• End date: November 30, 2012
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Principal Investigator: Kalinka Regina Lucas Jaquie Castelo Branco
• Grantee: Ademar Takeo Akabane
• Host Institution: Instituto de Ciências Matemáticas e de Computação (ICMC). Universidade de São Paulo (USP). São Carlos , SP, Brazil

Abstract

Web Services are the main implementation of service-oriented architecture (Service-Oriented Architecture - SOA). As business-critical components, Web services must provide high security. However, the deployment of secure Web services is a difficult task. In fact, studies show that a large number of Web Services are deployed with security vulnerabilities ranging from code vulnerabilities (eg, code injection vulnerabilities) to the incorrect use of standards and security protocols. The need for secure Web services arises from unauthorized attempts to access private data loss or corruption of critical data due to malicious actions. Other concerns include: protection against malicious interference that may cause undue delay or even denial of service. The main goal here is security, protect both the data and services. The risk of intrusion is related to vulnerabilities in services and potential security attacks. The objective of this research project is the development and a tool to detect vulnerabilities in security protocols and standards, thus providing the development of secure Web Services. (AU)