I am a post graduate student. I have to do a masters thesis on SOA vulnerabilities(SOA security). In the sense, finding vulnerabilities in web services or finding solutions to the existing vulnerabilities. In that direction i have been searching for vulnerabilities in SOA. Once the vulnerability is find i have to stimulate it and show to my guide. Some attacks i found in OWASP in the corresponding areas are DOS attacks, Injection attacks(SQL injection,XPath injection).I thought of implementing the XPath Injection attack and to give a solution to prevent the this attack.Am i choosen the correct path? I could not able to take a proper decision at the moment so as what to do next.
Can anyone please tell me how could i proceed to successfully reach the destination?
Thank You,
