Vordel has released its set of recommended best practices for XML Security. This document differentiates security concerns between different styles of SOA including SOAP and REST style Web Services. The recommendations are actionable and pragmatic, e.g. re-use corporate identity stores rather than creating a new silo for identity.
Recent Posts
- Security Champions Guide to Web Application Security
- Security > 140 Conversation with Pamela Dingle on Identity
- 6 Things I Learned from Robert Garigue
- The Curious Case of API Security
- Security Capability Engineering
- Ought implies can
- Security > 140 Chat with T. Rob Wyatt on MQ and Middleware Security
- Privilege User Management Bubble?
- The part where security products solve the problem
- Four Often Overlooked Factors to Give Your Security Team a Fighting Chance
Blogroll
- Adding Simplicity - An Engineering Mantra
- Adventures of an Eternal Optimist
- Andy Steingruebl
- Andy Thurai
- Anton Chuvakin
- Beyond the Beyond
- cat slave diary
- Ceci n'est pas un Bob
- ConnectID
- Cryptosmith
- Emergent Chaos: Musings from Adam Shostack on security, privacy, and economics
- Enterprise Integration Patterns: Gregor's Ramblings
- Financial Cryptography
- infosec daily: blogs
- Jack Daniel
- James Kobielus
- James McGovern
- John Hagel
- Justice League [Cigital]
- Kim Cameron's Identity Weblog
- Krypted - Charles Edge's Notes from the Field
- Lenny Zeltser
- Light Blue Touchpaper
- Mark O'Neill
- Off by On
- ongoing
- Patrick Harding
- Perilocity
- Pushing String
- Rational Survivability
- rdist: setuid just for you
- RedMonk
- RiskAnalys.is
- Rudy Rucker
- Software For All Seasons
- Spire Security Viewpoint
- TaoSecurity
- The New School of Information Security
- Windley's Technometria
- zenpundit
« OWASP Europe Wrap Up: Software Security Facts | Main | Insecure Code? Blame the Architects »
The comments to this entry are closed.
SOS: Service Oriented Security
- The Curious Case of API Security
- Getting OWASP Top Ten Right with Dynamic Authorization
- Top 10 API Security Considerations
- Mobile AppSec Triathlon
- Measure Your Margin of Safety
- Top 10 Security Considerations for Internet of Things
- Security Checklists
- Cloud Security: The Federated Identity Factor
- Dark Reading IAM
- API Gateway Secuirty
- Directions in Incident Detection and Response
- Security > 140
- Open Group Security Architecture
- Reference Monitor for the Internet of Things
- Don't Trust. And Verify.
Comments