12. Web Services & Security 

References 

OASIS (Organization for the Advancement of Structured Information Standard) · SOAP Message Header – ensuring Web service application integrity 

SOAP Version 1.2 http://www.w3.org/TR/2001/WD-soap12-20010709/ 

IBM Web Service Zone http://www-106.ibm.com/developerworks/webservices/ Articles

• Finding Your Way through Web Service Standards http://www-106.ibm.com/developerworks/webservices/library/ws-stand1.html
• Conversational Support for Web Services: The next stage of Web services abstraction http://www-106.ibm.com/developerworks/webservices/library/ws-conver/
• Developing Web Services, Part 3: SOAP Interoperability http://www-106.ibm.com/developerworks/webservices/library/ws-intwsdl3.html
• Web Services for J2EE http://www-106.ibm.com/developerworks/webservices/library/ws-jsr109/index.pdf
• Use SOAP-based Intermediaries to Build Chains of Web Service Functionality http://www-106.ibm.com/developerworks/webservices/library/ws-soapbase/
• Popular Links http://www-106.ibm.com/developerworks/webservices/ Discussion Forums http://www-106.ibm.com/developerworks/webservices/ 

Microsoft XML Web Service Development Center http://msdn.microsoft.com/webservices/ 

• Understanding XML Web Services
• The Birth of Web Services http://msdn.microsoft.com/msdnmag/issues/02/10/XMLFiles/default.aspx
• The Web Service Idea http://msdn.microsoft.com/webservices/understanding/readme/default.asp
• Understanding XML Namespaces http://msdn.microsoft.com/webservices/default.asp?pull=/library/en-us/dnxml/html/xml_namespaces.asp 

Building XML Web Services 

• Using SOAP Faults http://msdn.microsoft.com/webservices/default.asp?pull=/library/en-us/dnservice/html/service09172002.asp
• Creating Interactive Maps using MapPoint.NET http://msdn.microsoft.com/webservices/default.asp?pull=/library/en-us/dnmapnet/html/ntractmp.asp
• Essential Security in a Web Service World: A Proposed Architecture and Roadmap http://msdn.microsoft.com/webservices/default.asp?pull=/library/en-us/dnwssecur/html/securitywhitepaper.asp
• XML Files: A quick Guide to XML http://msdn.microsoft.com/webservices/default.asp?pull=/msdnmag/issues/02/04/xml/toc.asp
• Getting Started with XML Web Services in Visual Studio.NET http://msdn.microsoft.com/webservices/default.asp?pull=/library/en-us/dv_vstechart/html/vbtchGettingStartedWithXMLWebServicesInVisualStudioNET.asp
• XML Web Service Community http://msdn.microsoft.com/webservices/ 

WebService.org http://www.webservices.org/ 

• Standard 
• Development 
• Architecture 
• Web Services Papers
• What is Web Services 

Web Service Architect http://www.webservicesarchitect.com/ 

Security Related

• System, Audit, Network, Security Institute http://www.sans.org/newlook/home.php
• Center for Internet Security http://www.cisecurity.org/ 
• Security Consensus Operational Readiness Evaluation http://www.sans.org/SCORE/
• Global Information Assurance Certification http://www.giac.org/ 
• Internet Storm Center http://isc.incidents.org/ 
• Information Security Reading Room http://rr.sans.org/practice/identification.php
• Defense Service Security Web Site http://www.dss.mil/
• The World Wide Web Security FAQ http://www.w3.org/Security/Faq/www-security-faq.html 
• Microsoft.NET Web Service Security http://builder.com.com/article.jhtml?id=u00320020822GXS01.htm 
• WS-Security Specification 1.0 http://www-106.ibm.com/developerworks/webservices/library/ws-secure/
• WS-Security Spec sent to OASIS http://www.eweek.com/article2/0,3959,290627,00.asp 
• XML Signature 
• XML Encryption and Extensible Key Management Specification
• Symantec Security management System http://www.symantec.com/avcenter/

SOAP Message 

SOAP Envelope (Schema file) http://www.w3.org/2001/06/soap-envelope 

URI General Syntax RFC 2396 http://www.ietf.org/rfc/rfc2396.txt