Here is a report from SEI on Web Services mechanisms. Including SIgned, Encrypted, and other combinations and permutations.
Recent Posts
- Security Champions Guide to Web Application Security
- Security > 140 Conversation with Pamela Dingle on Identity
- 6 Things I Learned from Robert Garigue
- The Curious Case of API Security
- Security Capability Engineering
- Ought implies can
- Security > 140 Chat with T. Rob Wyatt on MQ and Middleware Security
- Privilege User Management Bubble?
- The part where security products solve the problem
- Four Often Overlooked Factors to Give Your Security Team a Fighting Chance
Blogroll
- Adding Simplicity - An Engineering Mantra
- Adventures of an Eternal Optimist
- Andy Steingruebl
- Andy Thurai
- Anton Chuvakin
- Beyond the Beyond
- cat slave diary
- Ceci n'est pas un Bob
- ConnectID
- Cryptosmith
- Emergent Chaos: Musings from Adam Shostack on security, privacy, and economics
- Enterprise Integration Patterns: Gregor's Ramblings
- Financial Cryptography
- infosec daily: blogs
- Jack Daniel
- James Kobielus
- James McGovern
- John Hagel
- Justice League [Cigital]
- Kim Cameron's Identity Weblog
- Krypted - Charles Edge's Notes from the Field
- Lenny Zeltser
- Light Blue Touchpaper
- Mark O'Neill
- Off by On
- ongoing
- Patrick Harding
- Perilocity
- Pushing String
- Rational Survivability
- rdist: setuid just for you
- RedMonk
- RiskAnalys.is
- Rudy Rucker
- Software For All Seasons
- Spire Security Viewpoint
- TaoSecurity
- The New School of Information Security
- Windley's Technometria
- zenpundit
« McGraw and Arce on Cyberwar | Main | Reference Monitor for the Internet of Things »
The comments to this entry are closed.
SOS: Service Oriented Security
- The Curious Case of API Security
- Getting OWASP Top Ten Right with Dynamic Authorization
- Top 10 API Security Considerations
- Mobile AppSec Triathlon
- Measure Your Margin of Safety
- Top 10 Security Considerations for Internet of Things
- Security Checklists
- Cloud Security: The Federated Identity Factor
- Dark Reading IAM
- API Gateway Secuirty
- Directions in Incident Detection and Response
- Security > 140
- Open Group Security Architecture
- Reference Monitor for the Internet of Things
- Don't Trust. And Verify.
Comments