Security for Service Oriented Architectures

This book examines application and security architectures, and illustrates the relationship between the two. Supplying guidance through the design of distributed and resilient applications, it gives an overview of the standards that service oriented and distributed applications leverage to provide the understanding to make decisions on design.

Auteur

Walt Williams, CISSP, SSCP, CEH, CPT has served as an infrastructure and security architect at firms as diverse as GTE Internetworking, State Street Corp, Teradyne, The Commerce Group, and EMC. He has since moved to security management, where he now manages security at Lattice Engines. He is an outspoken proponent of design before build, an advocate of frameworks and standards, and has spoken at Security B-Sides on risk management as the cornerstone of a security architecture.

Mr. Williams' articles on security and service oriented architecture have appeared in the Information Security Management Handbook. He sits on the board of directors for the New England ISSA chapter and is a member of the program committee for Metricon. He has a master's degree in anthropology from Hunter College.

Résumé
This book examines both application and security architectures and illustrates the relationship between the two. Supplying authoritative guidance through the design of distributed and resilient applications, it provides an overview of the various standards that service oriented and distributed applications leverage to provide the understanding required to make intelligent decisions regarding their design. The book reviews recent research on access control for simple and conversation-based web services, advanced digital identity management techniques, and access control for web-based workflows.

Contenu

Introduction. Four Kinds of Architectures. Implementing and Securing SOA. Web 2.0. Other SOA Platforms. Auditing Service-Oriented Architectures. Defending and Detecting Attacks. Architecture. Bibliography. Index.