Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Do we have any good resources on WebServices Security? Any book, pdfs, articles and even the detail answers regarding the securing web services would be appreciated.

share|improve this question

closed as not a real question by nealmcb, D.W., AviD Aug 7 '11 at 14:53

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

3  
It would help to know what technology you are aiming for. WebServices is really broad and are written in many different languages. –  Chris Andrè Dale Aug 2 '11 at 22:27
    
Karrax is right. There are hundreds of questions here with the tags you've used. Also search for "blog", "education" etc. on the site. –  nealmcb Aug 3 '11 at 1:19
    
@nealmcb,Karrax: Before posting the question, I tried to search all those mentioned tags but couldn't find anything here and I know its a very broad topic so before starting I just wanted to know few basics you know few pointers with which I can proceed with. Thanks for the comments though. I will look into the OWASP WebServices page as mentioned by Mike. Thanks all. –  p_upadhyay Aug 3 '11 at 6:50

1 Answer 1

up vote 6 down vote accepted

OWASP (The Open Web Application Security Project) provides a lot of resources for developers and pen-testers.

OWASP is an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security.

To the degree that web applications qualify as web services, are accompanied by web service APIs, or can be hardened/probed using the same techniques as web services, OWASP is a great resource.

You might start at their Web Services page.

share|improve this answer
    
Thanks Mike. OWASP just got slipped from my mind. Thanks. –  p_upadhyay Aug 3 '11 at 6:51

Not the answer you're looking for? Browse other questions tagged or ask your own question.