[转载]A Web Services Security Testing Framework

原始链接：http://www.sift.com.au/assets/do ... Framework-v1-00.pdf

“We hope that the Web Services Security Testing Framework will be adopted by the IT security community and will facilitate wider discussion and development around the security of this important web technology.” The report released by SIFT describes a framework that provides guidance on: * Why web services security is important and how it differs from typical applications * How and where to concentrate testing effort * How to plan for web services testing * How to thoroughly asssess web services security