A Validation Model of Data Input for Web Services

Provided by: IARIA
Topic: Security
Format: PDF
Web services inherited many well-known security problems of web applications and brought new ones. Major data breaches today are consequences of bad input validation at the application level. This paper presents a way to implement an input validation model for web services which can be used to prevent cross-site scripting and SQL injection through the use of predefined models which specify valid inputs. The proposed WSIVM (Web Services Input Validation Model) consists of an XML schema, an XML specification, and a module for performing input validation according to the schema.

Find By Topic