
	Home > XML Security Tutorial

Learning Guide:

EMAIL THIS

XML Security Tutorial

25 Feb 2005 | SearchSecurity.com & SearchWebServices.com

Digg This!

StumbleUpon

Del.icio.us

This tutorial is sponsored by:

Securing XML is an essential element in keeping Web services secure. Created in partnership with our sister site, SearchSecurity.com, this SearchSOA.com Tutorial is a compilation of resources that review different types of XML security standards and approaches for keeping your XML Web services secure. Send us an e-mail to let us know what other learning guides you'd like to see on SearchWebServices.com.

TABLE OF CONTENTS

   XML Security Key Terms and Definitions
   Introduction to XML Security
   OASIS
   WS-Security
   SAML
   XML Signatures & Encryption
   XML Firewalls
   More Learning Guides

XML Security Key Terms and Definitions Return to Table of Contents

Security Assertion Markup Language (SAML) (SearchSecurity.com Glossary)
Authentication (SearchSecurity.com Glossary)
Authorization (SearchSecurity.com Glossary)
Digital signature (SearchSecurity.com Glossary)
SOAP (Simple Object Access Protocol)(SearchWebservices.com Glossary)
Algorithm (SearchSecurity.com Glossary)
Extensible Access Control Markup Language (XACML) (SearchSecurity.com Glossary)
Organization for the Advancement of Structured Information Standards (OASIS) (SearchWebservices.com Glossary)
Encryption (SearchSecurity.com Glossary)
WS-Security (SearchWebservices.com Glossary)
Firewall (SearchSecurity.com Glossary)
Single signon (SearchSecurity.com Glossary)
Public key infrastructure (PKI) (SearchSecurity.com Glossary)

Introduction to XML Security Return to Table of Contents

Article: XML complexity introduces security risks (SearchSecurity.com)
Article: Web services require new approach to security (SearchSecurity.com)
Article: Sorting out the Web services security landscape (SearchSecurity.com)
Conference presentation: How to Overcome Web Services Security Obstacles (Information Security Decisions 2005)
Quiz: Infosec Know IT All Trivia: Securing Web services (SearchSecurity.com)
Advice: Confused about differences in Web services security technology (SearchSecurity.com)
Webcast: Web Services Security School, Lesson 1: Why Web services need security and trust (SearchWebServices.com)

OASIS Return to Table of Contents

Advice: National standards, security bodies release security checklists spec (SearchWebServices.com)
Article: OASIS ratifies core security spec (SearchSecurity.com)
Article: Latest Web services spec tackles application flaws (SearchSecurity.com)
Advice: How will the battle between W3C and OASIS affect Web service security standards? (SearchSecurity.com)
Article: Study shows companies still lukewarm (for now) on Web services (SearchSecurity.com)

WS-Security Return to Table of Contents

Web resource: Fast facts: WS-Security (SearchWebServices.com)
Q&A: Standards expert: WS-Security changing Web services landscape (SearchSecurity.com)
Article: Implementing WS-Security (SearchWebServices.com)
Advice: What security concerns does WS-Security address? (SearchSecurity.com)
Advice: Are there other projects for Web services security in the works beside WS-Security? (SearchSecurity.com)
Advice: How will WS-Security impact Web services deployments? (SearchWebServices.com)
Advice: A few questions regarding XML security (SearchWebServices.com)

SAML Return to Table of Contents

Advice: How SAML works (SearchWebServices.com)
Article: Young SAML must conquer business pressures (SearchSecurity.com)
Article: SAML 2.0 unifies support for federation (SearchWebServices.com)
Article: SAML ratification enables vendor interoperability (SearchSecurity.com)
Article: Federal agency demonstrates SAML interoperability (SearchWebServices.com)
Webcast: Web Services Security School, Lesson 4: SAML (SearchWebServices.com)
Advice: Are SAML and WS-Security competitive specifications for Web services security? (SearchSecurity.com)

XML Signatures & Encryption Return to Table of Contents

Article: Securing Web services requires out-of-box thinking (SearchSecurity.com)
Article: Web services pose identity management challenges (SearchWebServices.com)
Q&A: The pros and cons of securing Web services with SSL (SearchSecurity)
Article: Report recommends standalone XML security appliances (SearchWebServices.com)
Web resource: A how-to guide for supporting digital signatures within SOAP messages (SearchWebServices.com)
Advice: Determining from WSDL if a Web service supports XML signature (SearchSecurity.com)
Advice: Confused about differences in Web services security technology (SearchSecurity.com)
Advice: Support for XML signature/encryption (SearchWebServices.com)
Advice: What implementation(s) of XML encryption and XML signature would you recommend? (SearchWebServices.com)
Webcast: Web Services Security School, Lesson 3: XML Signature and XML Encryption for Web services (SearchWebServices.com)

XML Firewalls Return to Table of Contents

Advice: Securing Web services: A job for the XML firewall (SearchSecurity.com)
Article: XML firewalls dig deeper than traditional firewalls (SearchSecurity.com)
Article: Web application, XML firewalls converge in one appliance (SearchWebServices.com)
Article: Web services security vendors focus on access control, XML firewalls (SearchSecurity.com)
Article: New XML firewall keeps watch on Web services (SearchWebServices.com)
Article: Various flavors of firewalls are evolving (SearchSecurity.com)
Article: XML firewall integrates crypto hardware (SearchSecurity.com)
Article: Westbridge exec: When XML is a factor, standard firewalls don't cut it (SearchSecurity.com)
Web resource: Featured Topic: XML firewalls (SearchWebServices.com)

More Learning Guides Return to Table of Contents

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	Learning Guides
	XML Learning Guide
	SOAP Learning Guide
	UDDI Learning Guide
	WSDL Learning Guide
	SOA/SOI Learning Guide

SAML

UML-based SoaML attacks SOA services modeling issues

IBM, HP qualify on SAML 2.0

SOA governance, security concerns drive XACML interop

Microsoft, Liberty join for Web services identity interop

OASIS begins work on WS-Federation

Web 2.0 lacks the business impact of SOA, Burton warns

Eclipse and Novell join in Web service security effort

Liberty reaches out to open source

SAML declares victory, closes in on a billion IDs

WS-Security 1.1 approved

SAML Research

WS-Security (Web services security standards)

The technology of Web Service Security

Web 2.0 at the old ballgame

SOA complicated by ESB proliferation

BPEL4People and WS-HumanTask get reference implementation

Liberty offers Web 2.0 open source security

WSO2 releases C and PHP frameworks

The case against WS-Security

SOA governance, security concerns drive XACML interop

New BizTalk Services rolling out

Will acquisitions stifle SOA innovation?

RELATED GLOSSARY TERMS

Terms from Whatis.com − the technology online dictionary

Web Services Trust Language (SearchSOA.com)

WS-Security (SearchSOA.com)

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

SOA Data Architecture Solutions - Data Services, Business Intelligence, XQuery

SEARCH

TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.


TechTarget Corporate Web Site \| Media Kits \| Site Map All Rights Reserved, Copyright 2001 - 2009, TechTarget \| Read our Privacy Policy