XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany - Inria - Institut national de recherche en sciences et technologies du numérique
Conference Papers Year : 2021

XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany

Paul Höller
  • Function : Author
  • PersonId : 1154401
Alexander Krumeich
  • Function : Author
  • PersonId : 1154402
Luigi Lo Iacono
  • Function : Author
  • PersonId : 1117582

Abstract

XML Signature Wrapping (XSW) has been a relevant threat to web services for 15 years until today. Using the Personal Health Record (PHR), which is currently under development in Germany, we investigate a current SOAP-based web services system as a case study. In doing so, we highlight several deficiencies in defending against XSW. Using this real-world contemporary example as motivation, we introduce a guideline for more secure XML signature processing that provides practitioners with easier access to the effective countermeasures identified in the current state of research.
Fichier principal
Vignette du fichier
512098_1_En_1_Chapter.pdf (495.01 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03746041 , version 1 (04-08-2022)

Licence

Identifiers

Cite

Paul Höller, Alexander Krumeich, Luigi Lo Iacono. XML Signature Wrapping Still Considered Harmful: A Case Study on the Personal Health Record in Germany. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.3-18, ⟨10.1007/978-3-030-78120-0_1⟩. ⟨hal-03746041⟩
17 View
11 Download

Altmetric

Share

More