Web Service Security

Introduction

As internet-based services develop and mature, web-based attacks are becoming more common and sophisticated. There are various forms of attacks, ranging from simple distortions of the webpage to the spread of destructive programs (viruses, malware) using the web server. Web attacks can cause enormous damage using comparatively low technological knowledge, and can be used to gain valuable data such as personal, confidential, or proprietary information.

Existing security systems such as Intrusion Detection Systems and Intrusion Prevention Systems can detect and prevent conventional vulnerability threats; however, their performance and capabilities have limitations, as they protect the web application from the network level, not the web application level.

As such, building a web-specific security system for your website prevents both malicious web attacks and theft of personal information via the web.

Need

Theft of Social ID numbers (Social Security, etc.) and other personal information is becoming a serious social issue. Hackers often directly attack a webpage, thereby gaining access to personal information. Establishing a Web Service Security system can safely and efficiently protect all your information.

Need

Implementing a Web Service Security system helps fulfill regulatory compliance. Laws that regulate information networks, credit information, and e-commerce stipulate the protection of personal information. The regulations for public institutions are as follows:

Article 9 (Securing personal information safety) (1) Public institution websites must implement strong measures to safeguard all personal information from deletion, theft, disclosure, modification, and corruption when handling or transferring and receiving it over the digital information network (from here forward referred to as the “digital network”) according to e-Government Article 2, Clause 7.

Webpage attacks that modify or corrupt the webpage, or create a backdoor to facilitate future intrusions, are increasing. Such attacks are non-discriminating, and originate from around the world, frequently from China. As such, having a secure webpage is crucial.

Need