This paper looks at the four major threat categories you should consider when architecting your XML Web services:

1. Message Transport Security
2. Denial of Service Protections
3. Content Based Attacks
4. People and Process