views:

95

answers:

1

In typical Java applications, the XML parsers is XALAN/XERCES but they were not written with security in mind. I am curious to know if there are parsers that are more robust when it comes to security.

A: 

What do you mean by 'security in mind'? What do would you consider a secure XML parser?

In this Parleys video is a great talk about XML threats. Might give you some hints and concepts.

Edit: To answer your question: there are hardware solutions which can analyze your incoming HTTP, SOAP, etc communication and filter for virus attachments in SOAP, deliberately dangerous XML with large/infinite entity recursion etc.

kd304