Security is not a new concern for companies that want to protect key
information and systems from unauthorized access. Protection from such
attacks has traditionally been achieved by placing those systems in a tightly
controlled intranet accessed through a hardware firewall, possibly over
secure TCP/IP connections. However, as more information and functionality are
made available over the Web and distributed computing begins to cross
corporate Internet boundaries, these mechanisms are no longer adequate. In
addition, new concerns arise as a result of distributed computing and
transacting business over the Web.
With respect to Web services security, there are five primary areas to
consider. Authentication is the act of assuring an entity is who it says it
is by providing some form of proof. Authorization is the process of
determining what an authenticated user is en... (more)
Developers are beginning to develop more sophisticated Web services,
exchanging complex XML documents rather than simple parameter types. As this
shift takes place, development teams begin to grapple with different
approaches to designing these Web services interfaces through the use of
WSDL. As we've worked with a number of these teams, we've begun to discover
some important best practices that can be applied, particularly in the use of
XML Schemas in a Web services design.
In this article, we will focus on four specific areas: XML Schema style,
namespaces, XML and WSDL import ... (more)
In recent years, Web portals have risen in popularity as a way of
aggregating, organizing, and presenting content in a highly uniform,
customizable, and personalized way.
As the technologies that enable the creation and management of these Web
portals have evolved, it is not only information content that is being
offered, but application functionality as well. With application
functionality making its way to the Web portal, a whole new dilemma arises as
developers attempt to adapt their application functionality to the
characteristics and behavior of the Web portal.
Portal Conc... (more)
Mark is a senior constultant for the HP Developer Resource Organization with 10+ years experience involving distributed object technologies and building n-tier, web-based applications. He currently consults with enterprise customers on J2EE & web services development. Mark also has published technical white
David Lucas
Cathy Lopez
Shaul Efraim
Terence Martin Breslin
Cory Marchand
David Hughes
James Carlini
John Iffert
Dan Stolts
Joe Zeto
