XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany

Paul Höller
  • Fonction : Auteur
  • PersonId : 1154401
Alexander Krumeich
  • Fonction : Auteur
  • PersonId : 1154402
Luigi Lo Iacono
  • Fonction : Auteur
  • PersonId : 1117582

Résumé

XML Signature Wrapping (XSW) has been a relevant threat to web services for 15 years until today. Using the Personal Health Record (PHR), which is currently under development in Germany, we investigate a current SOAP-based web services system as a case study. In doing so, we highlight several deficiencies in defending against XSW. Using this real-world contemporary example as motivation, we introduce a guideline for more secure XML signature processing that provides practitioners with easier access to the effective countermeasures identified in the current state of research.
Fichier principal
Vignette du fichier
512098_1_En_1_Chapter.pdf (495.01 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03746041 , version 1 (04-08-2022)

Licence

Paternité

Identifiants

Citer

Paul Höller, Alexander Krumeich, Luigi Lo Iacono. XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.3-18, ⟨10.1007/978-3-030-78120-0_1⟩. ⟨hal-03746041⟩
13 Consultations
3 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More