In typical Java applications, the XML parsers is XALAN/XERCES but they were not written with security in mind. I am curious to know if there are parsers that are more robust when it comes to security.
A:
What do you mean by 'security in mind'? What do would you consider a secure XML parser?
In this Parleys video is a great talk about XML threats. Might give you some hints and concepts.
Edit: To answer your question: there are hardware solutions which can analyze your incoming HTTP, SOAP, etc communication and filter for virus attachments in SOAP, deliberately dangerous XML with large/infinite entity recursion etc.
kd304
2009-06-24 11:38:41