Breaking up the typical application paradigm into SOAP
with loosely coupled endpoint applications, security
becomes an important concern.
Web Services traffic flows through port 80 and 443, which
simplifies the traffic between multiple entities, but it also
creates a new security problems. As was mentioned earlier,
the SSL is insufficient when it comes to Web Services
security. Nonetheless, the SSL was not designed to secure
Internet-based Web Services [26]. Web Services allows
corporate resources to be accessible to outsiders, i.e.
uninvited parties, e.g., business partners, suppliers. These
uninvited parties can result catastrophic system failures
and data loss [13], [19], [16].