NonStop SOAP 4.1 User's Manual

Recommendations
While you design your security model for your services, you must study the potential threats to your
model and what technologies or protocol can be used to mitigate each threat. The developers can
use either the transport level security, such as HTTPS or WS-Security features or both to secure the
services. Based on your company’s security requirements, it is recommended to review the security
considerations section in the WS-Security specification.
http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0.html#seccon
You must also consider WS-I Security for designing your security model. The document explains
the different security challenges, threats, and security solutions.
http://www.ws-i.org/Profiles/BasicSecurity/2004-02/SecurityScenarios-0.15-WGD.pdf
284 WS–Security in NonStop SOAP 4