Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity

    Group Addresses Web Services Security

    By
    Darryl K. Taft
    -
    April 1, 2003
    Share
    Facebook
    Twitter
    Linkedin

      The Web Services Interoperability Organization Tuesday announced the formation of its Basic Security Profile Working Group (BSPWG).

      The group will focus on developing a basic profile for Web services security, much like the WS-I has developed a basic profile for achieving overall interoperability.

      Eve Maler, XML standards architect at Santa Clara, Calif.-based Sun Microsystems Inc., is the chairwoman of the WS-I Basic Security Work Plan task force. Maler said WS-I saw a need to go beyond the Basic Profile 1.0 and address security.

      “Its clear that security is an area of great interest in the area of Web services,” and in November 2002, the WS-I formed the Basic Security Work Plan task force to build a plan for dealing with security interoperability issues, she said.

      “Our group is a bootstrapping group looking at the problem space as opposed to the solution space,” Maler said. She also noted that the group so far has focused on two main types of security: “transport layer security and security that adheres to the message” throughout its journey.

      The group identified and listed several technologies that ought to be profiled, including HTTPS—or secure HTTP—OASIS Web Services Security V1.0 and SOAP (Simple Object Access Protocol) attachment security, she said.

      The BSPWGs interoperability profile, when complete, will feature transport security, SOAP messaging security and other security schemes enacted by the WS-I Basic Profile. The Basic Security Profile is intended to be an extension to the WS-I Basic Profile 1.0 and will reference existing specifications used to provide security, such as the WS-Security “outputs,” Maler said.

      The BSPWG will also develop a set of usage scenarios and their component message exchange patterns to guide their work. WS-I officials said the organization will produce a timeline in the next month for what it will deliver.

      There are about 25 member companies represented in the group, including Sun, IBM, Microsoft Corp., Oracle Corp. and Accenture Ltd., according to Maler. The use cases and scenarios represent “a grab bag submitted by participants in the group,” she added.

      WS-I chartered the group after a session at the recent WS-I meeting held in Salt Lake City. In fact, WS-I officials said the announcement of the groups formation was planned for last week. However, the announcement of the decision on two new board seats took precedence over that news—so Tuesdays announcement was held for a week.

      Latest Developer News:

      Search for more stories by Darryl Taft.

      Darryl K. Taft
      Darryl K. Taft covers the development tools and developer-related issues beat from his office in Baltimore. He has more than 10 years of experience in the business and is always looking for the next scoop. Taft is a member of the Association for Computing Machinery (ACM) and was named 'one of the most active middleware reporters in the world' by The Middleware Co. He also has his own card in the 'Who's Who in Enterprise Java' deck.

      MOST POPULAR ARTICLES

      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Big Data and Analytics

      Alteryx’s Suresh Vittal on the Democratization of...

      James Maguire - May 31, 2022 0
      I spoke with Suresh Vittal, Chief Product Officer at Alteryx, about the industry mega-shift toward making data analytics tools accessible to a company’s complete...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Cloud

      Yotascale CEO Asim Razzaq on Controlling Multicloud...

      James Maguire - May 5, 2022 0
      Asim Razzaq, CEO of Yotascale, provides guidance on understanding—and containing—the complex cost structure of multicloud computing. Among the topics we covered:  As you survey the...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×