A new working group within the Web Services Interoperability Organization (WS-I) will focus on ways to develop secure Web services, according to a statement released Tuesday by the WS-I.
The Basic Security Profile Working Group (BSPWG) is chartered with developing guidelines for interoperability between different Web services implementations, referred to as the Basic Security Profile. That security profile will be an extension of the WS-I Basic Profile 1.0, according to WS-I.
The WS-I Basic Profile provides guidelines for how Web services specifications such as SOAP, XML, or UDDI should be used together to develop interoperable Web services.
In particular, the BSPWG will tackle interoperability issues involving transport security, SOAP messaging security, as well as other issues raised by the WS-I Basic Profile.
BSPWG will also be responsible for developing usage scenarios and corresponding MEPs (message exchange patterns), according to WS-I.
An MEP is a template for passing messages between two parties using Web services technologies.
The BSPWG has been in the works since November, according to WS-I. At that time, a Basic Security Work Plan Working Group was created within the WS-I to identify and prioritize key Web services interoperability issues related to security.
That group presented its findings and recommendations to the full organization at the recent WS-I plenary session in
Resolving security issues that arise from the need for interoperability between different Web services implementations is key to the continued expansion of Web services, according to WS-I.
WS-I is one of a number of industry groups that was created to promote open standards for Web services interoperability across platforms, applications, and programming languages.
The group has a number of IT heavyweights on its board of directors including BEA Systems, Hewlett-Packard, IBM, Intel, Microsoft, Oracle, SAP and, most recently, Sun Microsystems.
Other groups with a hand in developing Web services standards include OASIS (Organization for the Advancement of Structured Information Standards), W3C (World Wide Web Consortium), and Liberty Alliance.
A timeline for delivering the Basic Security Profile and usage scenarios will be decided on within the next month, according to WS-I.
This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.
Download now »Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.
Download now »
The emergence of WLANs has created a new breed of security threats to enterprise networks.
Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation
Effectively address data protection challenges, implementing solutions that help store and protect businesscritical data while cutting costs and improving efficiency and reliability.
Download now »
Sign up to receive Architecture Resource Alerts
