« Whatever happened to give 'em enough eyes? | Main | Global security matrix »

WS-GameOver: 72% of ESBs using weak web services security?

Johannes Ernst points to a study on the primary security mechanism that organizations use to connect web services to their ESB:

  • WS-Security: 28%
  • Custom XML tags: 31%
  • HTTP Basic AuthN: 27%
  • No security: 14%

    • Don Smith points out that the Message is the King and the contract is the queen. It would appear that 28% of organizations take some measures to protect their king. If your opponent is any good at chess this is WS-GameOver.

    October 25, 2006 in Security, Security Metrics, SOA, Software Architecture, Web Services |

    Comments

    The comments to this entry are closed.