A review of attacks, objects, and mitigations on web services

Abstract Web service is a technology that continues to develop until now. Web services are needed for the exchange or dissemination of information between applications through a computer network. Various methods have been developed to improve the performance and security of web services. However, the more the increasing performance of web services, the higher the level of vulnerabilities and threats. Some attacks often target on web services are Denial of Service (DoS), Structure Query Language (SQL) injection, and eXtensible Markup Language (XML) injection. There are also many methods or techniques that researchers proposed as mitigations for these attacks. In this research, a literature review has been carried out regarding attacks as well as objects and mitigation of such attacks on web services.