Extending X-Road with metaservice code validation: A security-oriented contribution
X-Road is a secure data exchange platform widely used in e-Government infrastructures. A vulnerability was identified in its service registration mechanism, where users could inadvertently or maliciously use reserved codes intended for internal metaservices. This paper presents a software contribution that extends X-Road with a validation mechanism to prevent such misuse. Implemented as part of the GAUCHO, a e-Government cybersersecurity framework, this enhancement improves system integrity, prevents conflicts, and strengthens overall cybersecurity. The solution is integrated into the X-Road source code, follows its architectural conventions, and has been proposed to the upstream repository through a formal Pull Request.
Authors
- David G. Rosado (ORCID: https://orcid.org/0000-0003-4613-5501)
- Antonio Santos-Olmo (ORCID: https://orcid.org/0000-0002-2349-3894)
- Eduardo Fernández‐Medina (ORCID: https://orcid.org/0000-0003-2553-9320)
- V. Figueroa (ORCID: https://orcid.org/0009-0002-2812-354X)
- Luis Sánchez (ORCID: https://orcid.org/0000-0003-0086-1065)
Institutions
- University of Castilla-La Mancha (ES)
Publication Details
- Journal
- SoftwareX
- Published
- 2025-09-01
- DOI
- https://doi.org/10.1016/j.softx.2025.102320
- Primary Topic
- Software System Performance and Reliability
- Type
- article
- Field-Weighted Citation Impact
- 0.00