Dedication

To my family: Madhavi, Kamala, and Mallika, and to my colleagues at HCL

R.K.

To all my teachers: family, friends, and colleagues

P.C.

Brief Table of Contents

Copyright

Brief Table of Contents

Table of Contents

Preface

Acknowledgments

About this Book

I. SOA basics

Chapter 1. SOA requires new approaches to security

Chapter 2. Getting started with web services

Chapter 3. Extending SOAP for security

II. Building blocks of SOA security

Chapter 4. Claiming and verifying identity with passwords

Chapter 5. Secure authentication with Kerberos

Chapter 6. Protecting confidentiality of messages using encryption

Chapter 7. Using digital signatures

III. Enterprise SOA security

Chapter 8. Implementing security as a service

Chapter 9. Codifying security policies

Chapter 10. Designing SOA security for a real-world enterprise

Appendix A. Limitations of Apache Axis

Appendix B. WS-SecureConversation

Appendix C. Attaching and securing binary data in SOAP

Appendix D. Securing SAML assertions

Appendix E. Application-Oriented Networking (AON)

Index

List of Figures

List of Tables

List of Listings

Table of Contents

Copyright

Brief Table of Contents

Table of Contents

Preface

Acknowledgments

About this Book

I. SOA basics

Chapter 1. SOA requires new approaches to security

1.1. SOA lowers long-standing barriers

1.1.1. Basic tenets of SOA

1.1.2. Idea of a service

1.2. Lowering of barriers forces us to rethink security

1.3. Functional aspects of security: With and without SOA

1.3.1. Authentication

1.3.2. Authorization

1.3.3. Data confidentiality