Application firewalls good enough — for now — for Web services security

While functions such as identity management will become increasingly important, “If somebody can just look at the content of a SOAP message and pick out your credit card number, it doesn’t help much,” says Jason Bloomberg, a senior analyst at ZapThink LLC, a Web services research firm in Waltham, Mass.

Read more at: SearchSecurity (TechTarget)

OASIS Wants to Classify Web Security

ZapThink Senior Analyst Ronald Schmelzer discussed the importance of WAS and AVDL as they apply to Web services (define), which is where software development is heading, and by extension, an area attackers could try to exploit.

Schmelzer said because Web services will provide access to systems through an abstracted interface, it becomes harder for systems to get a grasp on who is making a request for application functionality and whether that person is authorized.

Read more at: Internetnews.com

Les produits de sécurisation des services web arrivent

Il encapsule tout type d’information structurée et représente 2 % du trafic internet à l’heure actuelle, mais devrait monter à 25 % en 2006, selon le cabinet d’analystes ZapThink.

Read more at: 01 Informatique (French)

XML Proxies

As the use and proliferation of XML and Web Services spreads throughout the corporate IT environment, so too will the demands on optimizing the performance of the XML data and applying enterprise-wide XML policies. Increasingly organizations are seeking to find solutions that can transparently monitor XML traffic on the network and apply business rules or corporate IT policies such as security, routing, performance, management, transformation, or end-point connection provisioning. Enterprises will implement XML Proxies, which can be either hardware Network Appliances,software Proxies, or software Firewalls, as a transparent layer over current LAN and WAN traffic, monitoring and acting on XML data as dictated by pre-configured rules.

XML Proxies

As the use and proliferation of XML and Web Services spreads throughout the corporate IT environment, so too will the demands on optimizing the performance of the XML data and applying enterprise-wide XML policies. Increasingly organizations are seeking to find solutions that can transparently monitor XML traffic on the network and apply business rules or corporate IT policies such as security, routing, performance, management, transformation, or end-point connection provisioning. Enterprises will implement XML Proxies, which can be either hardware Network Appliances,software Proxies, or software Firewalls, as a transparent layer over current LAN and WAN traffic, monitoring and acting on XML data as dictated by pre-configured rules.