Do we have any good resources on WebServices Security? Any book, pdfs, articles and even the detail answers regarding the securing web services would be appreciated.

  • 3
    It would help to know what technology you are aiming for. WebServices is really broad and are written in many different languages. – Chris Dale Aug 2 '11 at 22:27
  • Karrax is right. There are hundreds of questions here with the tags you've used. Also search for "blog", "education" etc. on the site. – nealmcb Aug 3 '11 at 1:19
  • @nealmcb,Karrax: Before posting the question, I tried to search all those mentioned tags but couldn't find anything here and I know its a very broad topic so before starting I just wanted to know few basics you know few pointers with which I can proceed with. Thanks for the comments though. I will look into the OWASP WebServices page as mentioned by Mike. Thanks all. – p_upadhyay Aug 3 '11 at 6:50

OWASP (The Open Web Application Security Project) provides a lot of resources for developers and pen-testers.

OWASP is an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security.

To the degree that web applications qualify as web services, are accompanied by web service APIs, or can be hardened/probed using the same techniques as web services, OWASP is a great resource.

You might start at their Web Services page.

  • Thanks Mike. OWASP just got slipped from my mind. Thanks. – p_upadhyay Aug 3 '11 at 6:51

Not the answer you're looking for? Browse other questions tagged or ask your own question.