Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As far as I know, SOAP services have security standards recognized by OASIS and W3C, such as:

  • XML-Encryption
  • XML-Signature
  • SAML

Are there any security standards for RESTful services?

share|improve this question
Depends on whose recommendations you'd want to adhere to, but yes, even NSA has some (PDF). There's even such chapters as Guidance for using HEAD and Consideration for use of SOAP :D – TildalWave Mar 24 '14 at 0:22
thanks a lot, that document was realy helpfull – Hybrid24a Mar 24 '14 at 1:31
up vote 2 down vote accepted

OWASP has some very good guidelines concerning the security of REST services.

share|improve this answer

In addition to the mentioned documents, these standards may be of your interest:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.