A Novel Approach to Implement Message Level Security in RESTful Web Services
Gyan Prakash Tiwary, Abhishek Srivastava

TL;DR
This paper introduces two new encryption methods to ensure message level security in RESTful web services, avoiding special HTTP headers and supporting various content types like XML, JSON, and plain text.
Contribution
The paper proposes novel encryption techniques that provide message level security in RESTful web services without relying on special HTTP headers or content canonicalization.
Findings
Effective encryption methods for multiple content types
No need for special HTTP headers or content negotiation
Compatible with popular RESTful content formats
Abstract
The world is rapidly adopting RESTful web services for most of its tasks. The once popular SOAP-based web services are fast losing ground owing to this. RESTful web services are light weight services without strict message formats. RESTful web services, unlike SOAP, are capable of message transfer in any format be it XML, JSON, plain text. However, in spite of these positives, ensuring message level security in REST is a challenge. Security in RESTful web services is still largely dependent upon transport layer security. There has been some work recently towards message level security in such environments wherein the transfer of message level security metadata is done through utilising new HTTP headers. We feel, however, that any method that compromises the generality of the HTTP protocol should be avoided. In this paper, therefore, we propose two new ways of encryption that promise to…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsService-Oriented Architecture and Web Services · Advanced Software Engineering Methodologies · Mobile and Web Applications
