Web Services based computing is currently an important driver for the software industry. While several standards bodies (such as W3C and OASIS) are laying the foundation for Web Services Security, several research problems must be solved to make secure Web Services a reality. This paper describes techniques for Web Services Security and some of the challenges for the future.