ApacheCon Vancouver : Training on Web Services Security

Today is the first day at ApacheCon 2011 @ Vancouver - Canada.

My training on Web Services Security started around 2.30 in the afternoon.

First part was a presentation on different security patterns and standards - then started digging in to the Rampart code.

All the samples I used are available here. You can use a simple SVN client to get that code. It comes as Eclipse projects and when loaded in to an Eclipse workspace, just set the SAMPLES_HOME environment variable in ECLIPSE to the root of the downloaded code - it should build fine then... Following are some of the resources that you can look in to.. 1. http://RampartFAQ.com 2. Understanding WS – Security Policy Language 3. Applying policies at binding hierarchy 4. Password Callback Handlers Explained 5. SAML Bearer Confirmation Method, Sender Vouches & Holder-of-Key 6. Identity Delegation in WS Trust 1.4 7. WS Security Policy – Asymmetric Binding Explained

ApacheCon 2011 : Web Services Security - Patterns, Practices and Threats

I'll be conducting a training on "Web Services Security - Patterns, Practices and Threats" at ApacheCon this time. Would be on 7th November from 2.30 PM to 5.30 PM. If you are planning to attend ApacheCon, now it's open for registration.

During this session I'll be covering the practical importance of security standards like, WS-Security, WS-Security Policy, WS-Trust and risks associated with those. Further the session will cover patterns, best practices and threats associated with SOA security models.

Interoperability Through Community