web services security

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Is security the SOA showstopper?

A new report in InformationWeek by Andy Dornan calls SOA security "one treacherous journey."Vendors and committees have thrown a bewildering plethora of immature or incompatible security specs and solutions at usTreacherous indeed. SOA increasingly addresses services on both sides of the firewall, and therefore opens up the most critical business...

Tags: Web Services, Standards Watch, General

Blog posts 2007-07-30

Choose the Right Web Services Security Solution

Web services are designed to expose business functionality in an interoperable and loosely coupled manner. While they have the potential to reap the benefits of an SOA infrastructure, they also introduce the risk of unauthorized access to the business assets. Therefore, it is important to secure web services by limiting...

Tags: Web, Web Service, Jupitermedia Corp., Web Services Security, Web Services, Channel Management, Service-Oriented Architecture (SOA), Security, Enterprise Software, Software, Marketing

White papers 2007-05-21

Web Services Security: What's Required to Secure a Service-Oriented Architecture

As organizations move to adopt SOA, they face a new set of requirements in their security landscape. The nature of SOA's loosely-coupled connections and use of open access have the potential to leave data unprotected, especially during multi-step transactions. As a result, there is a need to address more...

Tags: Security, Web, Web Services Security, SOA, Service-Oriented Architecture (SOA), Web Services, Middleware, Enterprise Software, Software

White papers 2006-10-01

Verified Reference Implementations of WS-Security Protocols

This paper describes a new reference implementation of the web services security specifications. The implementation is structured as a library in the functional programming language F#. Applications written using this library can interoperate with other compliant web services, such as those written using Microsoft WSE and WCF frameworks. Moreover, the...

Tags: Reference Implementation, Implementation, Web Services Security, Windows Communication Foundation, Functional Programming, Web Services, Security, Enterprise Software, Software

White papers 2006-06-27

Web Services Security With WebSphere Application Server V6 - Part 1: Introduction to Security Architectures

This paper provides an introduction to some simple Web services security architectures. Subsequent papers in this series will provide step-by-step instructions on how to implement these architectures using IBM products, as well as further advice on selecting tokens. The purpose of the diagrams in this paper is to convey the...

Tags: Web, IBM WebSphere, Web Services Security, Intermediary, Architecture, IBM WebSphere Application Server, IBM Corp., Web Services, Security, Middleware, Enterprise Software, Software

White papers 2006-04-19

Security: standards aren't enough

A lot of people worry about the security of Web services transactions, and rightfully so. However, some experts are concerned that we're taking a ham-handed approach to Web services security, and worrying too much about the wrong types of threats. Such concern was voiced recently in a ZDNET commentary by...

Tags: attack, security

Blog posts 2005-10-11

McAfee tool to check Web services security

McAfee tool to check Web services securityParasoft's SOA Test 4.0 Does thisParasoft's SOA Test 4.0 does this in the context of functional testing scenarios. Much more robust solution and much more mature.

Tags: Web services, PRODUCTIVITY, SECURITY, Parasoft SOA Test, Web Services Security, McAfee Inc., tool, Web

Discussion threads 2005-07-13

Web Services Security Interoperability Using WSE 2.0 SP3 and WebLogic Workshop 8.1.4

The basic goal of this paper is to demonstrate the state-of-the-art in Web services security interoperability between WebLogic Workshop 8.1.4 and WSE 2.0 SP3 using username tokens and X.509 certificates. For the most part, this is a success. Thanks a great deal to compliance to the OASIS Web Services Security...

Tags: Web, BEA WebLogic, Interoperability, BEA WebLogic Workshop, Web Services Security, Web Services, Security, Enterprise Software, Middleware, Software

White papers 2005-06-01

WS-Security Interoperability Using WSE 2.0 and Sun JWSDP 1.5

WS-Security is a specification to enable security for Web services; specifically through message integrity, message confidentiality, and single message authentication. Many vendors are now starting to provide implementations of WS-Security. Microsoft offers OASIS WS-Security 1.0 support in WSE Web Services Enhancements 2.0, a download from MSDN that complements the Web...

Tags: Web, Interoperability, Sun Microsystems Inc., Web Services Security, Microsoft Corp., OASIS, Web Services, Security, Enterprise Software, Software

White papers 2005-05-01

Web Services Security Configuration in a Service-Oriented Architecture

Security is one of the major concerns when developing mission-critical business applications and this concern motivated the Web Services Security specifications. However, the existing tools to configure the security properties of Web Services give a technology-oriented view; only assisting in choosing data to encrypt and the encryption algorithms to use....

Tags: Web, Configuration, Web Services Security, SOA, Web Services, Channel Management, Security, Enterprise Software, Software, Marketing

White papers 2005-04-05

Web Services Security Interoperability Using Web Services Enhancement 2.0 and Systinet Server 5.0 for Java

Web Services Security (WS-Security) is a specification to enable security for Web services, specifically through message integrity, message confidentiality, and single message authentication. Many vendors are now starting to provide implementations of WS-Security. Microsoft offers OASIS WS-Security 1.0 support in WSE Web Services Enhancements 2.0, a download from MSDN that...

Tags: Web, Interoperability, Java, Web Service, Web Services Security, Microsoft Corp., Systinet Corp., Web Services, Channel Management, Security, Enterprise Software, Software, Marketing

White papers 2005-03-01

Security still up in the air for many

A new survey out today from Oblix finds security continues to be a showstopper for Web services implementations. About 42% of 260 IT managers and developers say security concerns have kept them from extending Web services beyond the firewall, versus 43% that say there has been no problem. (Another...

Tags: Web, security, Web service, Web Services Security

Blog posts 2005-01-31

Web Services Security: Key Industry Standards and Emerging Specifications Used for Securing Web Services

Companies worldwide are actively deploying Web services, both in intranet and extranet environments. While Web services offer many advantages over current alternatives, they still present key challenges, especially in terms of security. XML security standards are essential for providing controlled access to Web services. By relying on well-established and tested...

Tags: Web, Industry Standard, Industry, Web Service, XML, Specification, Web Services Security, Computer Associates International Inc., Web Services, Channel Management, Security, Enterprise Software, Software, Marketing

White papers 2005-01-01

Web Services Declarative Security

A major problem facing businesses nowadays is how to quickly and effectively introduce new software technologies into their applications. This can be seen with the introduction of web services, and securing them using web services security. One solution to this problem is to use a declarative environment to rapidly test,...

Tags: Web, Oracle Corp., Web Service, Web Services Security, Web Services, Channel Management, Security, Enterprise Software, Software, Marketing

White papers 2004-11-01

"Ask the Developer Security Experts" Series: Using WSE to Secure Your Web Services With WS-Security-Level 200

This webcast series brings together some of the sharpest security-focused Microsoft developers to provide expert answers to your questions about securing your Web services. This webcast will begin with a brief discussion of the advantages of using WS-Security over traditional wire level security on the protocol level, including an explanation...

Tags: Developer, Web, Webcast, Web Service, Web Services Security, Microsoft Corp., Web Services, Security, Digital Media, Enterprise Software, Software, Consumer Electronics, Personal Technology

Webcasts

The Java Web Services Developer Pack 1.5

This webcast explains the Java Web Services Developer Pack 1.5. The Java Web Services Developer Pack JWSDP provides developers with access to the latest Web Services and XML technologies. The JWSDP 1.5 release, which occurred in November 2004, delivers support for the latest WS-I profiles, XML and Web Services Security,...

Tags: Developer, Web, Digital Signature, Java, Web Services Security, XML, Digital Signatures, Channel Management, Security, Software/Web Development, Web Development, Marketing

Webcasts

MSDN Architecture Webcast: Web Services Security Patterns (Level 300)

Making an architectural decision on securing Web services is not as simple as building the services themselves. Web service security presents many more challenges than securing a typical enterprise application because the reach and scope of the services is far larger and diverse. Your choice of Web service architecture, infrastructure...

Tags: Microsoft Developer Network, Web, Webcast, Web Service, Web Services Security, Microsoft Corp., Architecture, Channel Management, Web Services, Marketing, Enterprise Software, Software

Webcasts

Ensuring Web Services Security through Automated Identity Testing

The proliferation of service-oriented architectures SOAs and the trend toward external partner integration have added layers of complexity to identity testing. And because there is no standard methodology for testing identities, roles, and access controls within Web services, application developers must try to anticipate and test every possible use case...

Tags: Web, Web Services Security, SOA, Identity, Crosscheck Networks, Service-Oriented Architecture (SOA), Web Services, Middleware, Enterprise Software, Software

White papers

The New XML Standards for Secure Web Services

Until recently, Web services security was based on Public-Key Infrastructure PKI at the transport level. Most Web services developers with security concerns rely on SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption, the industry-accepted standard protocol for secured encrypted communications over TCP/IP. But SSL doesn't work that well for Web services....

Tags: Web, Web Service, XML, Web Services Security, SSL, Standards, Hop, Authentication/Encryption, PKI, Ssl/Tls, Channel Management, Web Services, Network Security, Security, Marketing, Enterprise Software, Software, Networking

White papers

MSDN Architecture Webcast: Web Services Security Patterns (Level 200)

There are many choices a user needs to make when providing security for the Web services, including whether to secure at the message or the transport level, and what form of certificate or token to use. This webcast discusses the latest guidance from Microsoft patterns & practices and offers recommendations...

Tags: Microsoft Developer Network, Web, Webcast, Web Service, Web Services Security, Microsoft Corp., Channel Management, Web Services, Digital Media, Security, Marketing, Enterprise Software, Software, Consumer Electronics, Personal Technology

Webcasts