Tuesday, March 16, 2004

Tutorial at SD West on Friday On Friday morning, I'm presenting a 90-minute tutorial about Web Services security at SD West in Santa Clara.  I'll be talking about WS-Security and SAML, showing examples of content-based threats such as SQL Injection, and I'll show some practical examples using the Microsoft WSE and Vordel's APIs for XML Signature and SAML.

Free XML security wallchart If you missed the wallchart which Vordel put together for the December 2003 issue of Web Services Journal, you can now receive a copy in the mail by filling out this form. All you need is a curiousity about questions like "Where does SSL fit in with Web Services security" or "What are all these new specifications I keep hearing about", some spare wall-space, and a valid email address. The wallchart is arranged vertically with firewalls and transport-level security at the bottom, then works its way up through XML security (XML Signature, XML Encryption), next comes WS-Security, and then the higher-level WS-* specifications, and then finally the reliable messaging and co-ordination specifications are at the top.

Vordel wins "Software Oscar" From the press-release-pasted-into-blog department: Vordel, the Web Services security company, has been chosen by the readers of the Web Services Journal (WSJ) for a Readers' Choice Award in the category of 'Best Web Services Security Solution'. The award, known as a "software industry Oscar" was given to Vordel's flagship product, VordelSecure, the XML security server, by readers of the industry-leading WSJ. "The award is further evidence of Vordel's commitment to excellence," said Vic Morris, CEO of Vordel. "It's also a validation of our drive to further the adoption of Web Services in the business world." VordelSecure provides content filtering, and identity-based protection and management of XML and Web Services. The product uses open standards to interact with access management tools from major vendors, as well as major application server platforms and security technologies. VordelSecure shared the category with access management products from IBM, RSA, and Netegrity.