How many security breaches do you think there really are?

Question

Lieberman Software released a study today that finds 87% of IT pros believe the reports of security breaches among financial institutions belie the true number of hacks occurring within the industry.According to eWeek, the report, which surveyed nearly 150 IT pros, concludes that IT faces a lack of confidence concerning of advanced persistent threat (APT) attacks and how organizations are able to deal with them.Speaking with eWeek, the current President of Lieberman Software, Philip Lieberman, explained that the rising use of "automation among attackers and the increased use of zero days and unpatched vulnerabilities are adding to [the security risks that organizations face]." While IT is partof the problem, Lieberman places a larger portion of blame with senior leadership, which doesn't build "resiliency into their business operations...
This topic first appeared in the Spiceworks Community

Answer 1

Hi Shanti,
I did not have that specific problem.
The way I stripped the envelope was by simply using embedded JAVA and a regular expression (an alternative to this could be to make your message a DOM object and use XPath to extract the payload).
I found that this did not work in my case because I needed the header in the original message. So instead I am currently using XPath at the invoked webservice instead.
I am still working on finding a way to get a proper message sent from BPEL. Here is some suggestions from my SR to Oracle:
1. Continue to use your current solution. (paraphrased by me)
2. Do not wrap the MESSAGES with a SOAP envelope before they are placed on the inbound JMS queue.
3. If appropriate try and use HTTP BINDINGS to invoke the WebSevices.
I am working on the 3rd option, since the first two are not usable in my case.
Regards,
Aagaard
PS: My reg. ex. looked something like this:
aSource = aSource.replaceAll("(?s)<backslashbackslash/SOAP-ENV:Body>.*", "");
aSource = aSource.replaceFirst("(?s)^.*<SOAP-ENV:Body>\n+", "");
aSource = aSource.replaceAll("(?s)backslashbackslash-backslashbackslashs+", "");