7/31/2019 Web Services Security Greg Reinacker s Weblog

1/4

7/31/2019 Web Services Security Greg Reinacker s Weblog

2/4

7/31/2019 Web Services Security Greg Reinacker s Weblog

3/4

:HE6HUYLFHV6HFXULW\_*UHJ5HLQDFNHUV:HEORJ

ZZUDVVRFFRPJUHJUZHEORJZHEVHUYLFHVVHFXULW\

$XWKHQWLFDWLRQDQG1(75HPRWLQJ*UHJ5HLQDFNHUV:HEORJ0XVLQJVRQMXVWDERXWHYHU\WKLQJ

0DUFKDWDP

ZD\VWRGHDOZLWK62$3KHDGHUV

$JUHHG,JXHVVP\SRLQWQRWYHU\FDUHIXOO\VWDWHGZDVWKDWWKHKHDGHUVZRXOGDOOKDYHWRORRN

GLIIHUHQWVHHH[DPSOHDERYHDQG,PXVWXQGHUVWDQG\RXUVHUYLFHWRFUDIWWKHKHDGHU

7KHPRUHFRPSOLFDWHGSDUWLVJRLQJWREHZKDWDOJRULWKP\RXFKRVH)RUH[DPSOH56$

VLJQDWXUHVDUHYHU\FRPPRQULJKWQRZVRWKH\KDYHDORWRIVXSSRUWLQ-DYD1(7HWF%XWLI,

ZHUHWRFKRRVH3*3VLJQDWXUHVWKDWZRXOGFDXVHPRUHSUREOHPVWKDQFUXIWLQJXSVRPH62$3

KHDGHUV

/RJLQ ,DJUHHWKDWLWLVQWWKHEHVWWKLQJLQWKHZRUOGEXW\RXDUHGHVFULELQJKRZ:66HFXULW\

DQG:6/LFHQVHZLOOZRUNZLWK.HUEHURV@E\DIHZTXHVWLRQV,WKRXJKW, GSRVWDERXWXVLQJP\%DVLFDQG'LJHVWDXWKHQWLFDWLRQ

PRGXOHVZLWK1(7UHPRWLQJ$V\RX UHSUREDEO\DZDUH1(7UHPRWLQJGRHVQRWLQFOXGHRXW

RIWKHER[>@

5HSO\

7/31/2019 Web Services Security Greg Reinacker s Weblog

4/4