I attended the RSA Security Conference last year and was surprised not to see better guidance on securing web services. This combined with the challenges I observed as a member of the WS-I Basic Security Profile Sample Application's team inspired our...

Network eavesdropping may lead to disclosure of confidential information even though the SOAP message body is encrypted! How could this be possible you ask? Read on... http://blogs.msdn.com/thehoggblog/articles/518574.aspx

In case anyone missed the recent web casts on Web service security that Don Smith, Ron Jacobs, Dwayne Taylor and Mark Fussell have been doing take a look. There are three web casts covering Kerberos, X.509 Tokens or UsernameTokens. For more information...

We have just released our Security token service for WSE 3.0. So if you are interested in Web service security, or are learning WSE 3.0 or are interested in learning more about SAML head to our workspace and take a look... http://practices.gotdotnet.com...

Threats Message data may be malformed for malicious intentions such as injection attacks Vulnerabilities XML serialization helps validate some data types as XML data from the message is transformed into .Net data types – but this does not...