XML Web services security best practices

TalkBack 1 of 1:

• Thread View
• Flat View

Vague

I think that most of the suggestions are at a high-level - also some related and some not. For example, doing NAT is a very generic security requirement. Also, the immediate next question to follow will be how can I do most of this stuff.

It is not a simple task to plan for web services security involving all the things mentioned. Also, a very critical aspect is where (in the information chain) do we implement each one of these. For example, protect XML DOS - is this a developer task or a tool task? Also, providing xml signatures - should this happen at individual providers (in each web service implementation), or concentrated at a XML firewall, for example?

There are really serious architectural and performance consideration that need to be made before these are implemented. I would imagine that best practices have to include where (in the information supply chain) to implement each of these functions.

Posted by: seetharamarao   Posted on: 09/02/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now