NIST issues guidelines on securing Web services

These are software/hardware independent guidelines written for Service Oriented Architecture (SOA) based web applications.

NIST issues guidelines on securing Web services
http://www.gcn.com/online/vol1_no1/44962-1.html

NIST - 128 page guideline for Securing Web servers
http://csrc.nist.gov/publications/nistpubs/800-95/SP800-95.pdf

QUOTE: The National Institute of Standards and Technology has released a 128-page guide to help organizations understand the security challenges of Web services in service-oriented architecture. NIST Special Publication 800-95, “Guide to Secure Web Services,” provides practical guidance on current and emerging standards applicable to Web services in addition to background information on the most common security threats to SOAs based on Web services. The guidelines are hardware and software independent and do not address perimeter security devices such as firewalls or access control tools.