关键词: Web服务, 攻击, SOAP消息, 恶意内容, 特征检测

Abstract: Malicious content attacks based on SOAP messages have great impact on application and popularization of Web services. In order to detect the malicious content in SOAP message, this paper proposed a new method of SOAP message signature detection. This method defined the SOAP Item and SOAP Rule to describe the feature of malicious content, and introduced the SOAP message parsing algorithm and SOAP rule matching algorithm to detect the malicious content attacks detection. According to this proposed method, a prototype system of Web services attack detection was designed and implemented. The experimental results of attack detection and performance analysis show that this system has good detection effect and performance.

Key words: Web service, attack, SOAP message, malicious content, signature detection