[Owasp-kansascity] Web Service

Fri Jan 28 15:19:42 EST 2005

I am trying to determine how the security should be set-up for a web
service.  A project has been initiated for the creation of a web service
that will be using .NET.  This service will be (for a better word)
anonymous that open for a number of application to access.  The web service
at first will be the communication between two different applications one
will be sending a MQ Series message to a database.  What I guidance with is
how to secure the web service or should the applications be secured that
use the web service.  I would like to have some instruction on how this is
being done at different sites or guided to some documentation that might
explain this concept.  I am not up-to-date with .NET.  Can this be handled
total within the .NET framework?

Thanks