April 01, 2003

WS-I working group tackles security

Aims to develop guidelines for Web services interoperability

A new working group within the Web Services Interoperability Organization (WS-I) will focus on ways to develop secure Web services, according to a statement released Tuesday by the WS-I.

The Basic Security Profile Working Group (BSPWG) is chartered with developing guidelines for interoperability between different Web services implementations, referred to as the Basic Security Profile. That security profile will be an extension of the WS-I Basic Profile 1.0, according to WS-I.

The WS-I Basic Profile provides guidelines for how Web services specifications such as SOAP, XML, or UDDI should be used together to develop interoperable Web services.

In particular, the BSPWG will tackle interoperability issues involving transport security, SOAP messaging security, as well as other issues raised by the WS-I Basic Profile.

BSPWG will also be responsible for developing usage scenarios and corresponding MEPs (message exchange patterns), according to WS-I.

An MEP is a template for passing messages between two parties using Web services technologies.

The BSPWG has been in the works since November, according to WS-I. At that time, a Basic Security Work Plan Working Group was created within the WS-I to identify and prioritize key Web services interoperability issues related to security.

That group presented its findings and recommendations to the full organization at the recent WS-I plenary session in Salt Lake City, WS-I said.

Resolving security issues that arise from the need for interoperability between different Web services implementations is key to the continued expansion of Web services, according to WS-I.

WS-I is one of a number of industry groups that was created to promote open standards for Web services interoperability across platforms, applications, and programming languages.

The group has a number of  IT heavyweights on its board of directors including BEA Systems, Hewlett-Packard, IBM, Intel, Microsoft, Oracle, SAP and, most recently, Sun Microsystems.

Other groups with a hand in developing Web services standards include OASIS (Organization for the Advancement of Structured Information Standards), W3C (World Wide Web Consortium), and Liberty Alliance.

A timeline for delivering the Basic Security Profile and usage scenarios will be decided on within the next month, according to WS-I.

Close

On Twitter now

Architecture

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Architecture Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2009 Infoworld, Inc.