Security

"At the beginning of 2003, the OASIS group approved the Security Assertion Markup Language (SAML) specification. With 55 individuals from 25 companies participating, one would think SAML does everything and would be well understood. Instead, misconceptions about SAML exist in the software development community. In this article, Frank Cohen details and debunks many of the myths and misunderstandings surrounding SAML." From IBM developerWorks.

Hits: 59
Rating: 10.00
Rate it
Comment on it

Weblog: "Championing open and secure information management."

Hits: 26
Rate it
Comment on it

"The Open Web Application Security Project (OWASP) is an Open Source community project staffed entirely by volunteers from across the world. The project is developing software tools and knowledge based documentation that helps people secure web applications and web services."

Hits: 113
Rate it
Comment on it

Overview that includes an answer to the question: "Why not SSL?"

Hits: 323
Rate it
Comment on it

In this XML.com article, Rich Salz looks at all the different proposals for securing Web services.

Hits: 111
Rate it
Comment on it

" A model I have explored recently, and which looks quite looks promising, is aligning security management with service management. What is this Service Management, you may ask. The short answer is that IT service management is about managing provision of IT department in the way that ensures IT services delivered meet business requirements and expectation. The longer answer is that the IT service management is about how you manage capacity, continuity and availability, service levels, change, configuration and releases IT relationships and how you budget and account for IT services." By Jiri Ludvik.

Hits: 23
Rate it
Comment on it

SpiLabs white paper: "This white paper discusses various types of attacks based on the SOAP implementation of Web services over HTTP and describes how you can shield your applications from these assaults." In PDF.

Hits: 196
Rate it
Comment on it

Series of Microsoft papers:

"These articles explore the proposed standards that Microsoft, IBM and others have been working on as part of the Global XML Web Services Architecture (GXA) platform. GXA defines a framework that augments the basic Web service with generic higher-level services like security, reliability and transactions, which are required by many distributed applications and are not specific to a particular problem domain. You need to understand these proposals to see one way the Web service platform could evolve over time."

Hits: 47
Rate it
Comment on it

Overview of Web Services Security (WS-Security) for securing SOAP message exchanges. By IBM.

Hits: 79
Rate it
Comment on it

Overview of how WS-Trust can enable interoperable WS-Security based message-layer security. webservices.xml.com, 06/24/03.

Hits: 47
Rate it
Comment on it

"XACML, the newest standard in encoded data exchange, makes possible a simple, flexible way to express and enforce access control policies in a variety of environments, using a single language." Sun white paper.

Hits: 30
Rate it
Comment on it