Solve Your Application Security Issues @ SOA WORLD MAGAZINE

Solve Your Application Security Issues

I'm sure I'm like many of you in this respect: I got into engineering because I love the idea of being able to address complex problems with a combination of my talent, my friends' talent, and the tools that I can come up with to make our work as easy as possible (work smart not hard!). It is this approach that has guided me in my work as an application and technical architect.

Reader Feedback : Page 1 of 1

#6	anonymous commented on the 1 Feb 2005 I agree. All the articles in the magazine are written to promote the products of the companies the authors work for.
#5	Anonymous commented on the 28 Jan 2005 Since when is this considered a respected magazine? I thought that a majority of sys-cons articles where supposed to be vendor and self advancement. Oh yeah isn't that also why people join TC of oasis? I thought the article had some good points and some useful information, things to ponder for when I need implement similar requirement. The comments help as well but don't be so slanderous; it takes away from informative comments.
#4	DataPower commented on the 16 Jan 2005 This is not a vendor article: DataPower and RSA did not author, pay for or place this article, the author is completely independent. It's based on his experience implementing these products in production. Of course, we are grateful to be recognized for having good products, but the main point of the article seems to be educating readers about the emerging SOA security architecture. It is unfortunate that Marc Chanliau, a Netegrity representative, immediately resorted to personal insults to the author, the Web Services Journal editors, and the companies involved. Chanliau is a web services product manager at Netegrity, and has a direct financial interest in destroying independent SAML & web services security vendors. As for independent evidence of claims about DataPower's performance and features, here are just a few: * "the XS40 is an XML-security powerhouse ... with throughput of just over 100 Mbps." - Network Computing * "DataPower has strong integration for security and management. ... All of this adds up to the strongest overall current feature set." - Forrester Research, XML Security Gateway Report *** "In our own tests...living up to DataPowers claims of 'wire speed XML processing'." - IBM Corporation, "XML Appliances WP"
#3	Paul O'Connor commented on the 8 Dec 2004 Marc, you failed to mention that you also work for Netegrity (according to your Sys-Con bio)...
#2	Marc Chanliau commented on the 8 Dec 2004 I'm one of the originators of SAML, I have contributed to Liberty, WS-Security, and currently contributes to WS-Trust and WS-SecureConversation. Such articles should not appear in a respected magazine such as Web Services Journal. The writer has absolutely no clue what tools are out there to support the standards he's talking about. Plugging second-rate products to the detriment of actual (and useful) tools is laughable. I encourage the writer to inform himself before attempting to inform us.
#1	Gary Johnson commented on the 6 Dec 2004 What a shameless plug! It is amazing that such vendor-driven articles are presented as "educational". First, there is no proof presented for the amazing performance claims mentioned. Second, it article itself mentions that XACML PDP do not exist today - so without PDP what real good are PEP for and what practical use any large application can take of them? Third, it mentions RSA toolkit as leader in SAML - huh! when did that happen? How about Netegrity, Oblix, and other vendors that own 90%+ market share? I will encourage anyone looking to deploy security to look are more neutral sources of information.

YOUR FEEDBACK

	Best Practices for Building SOA Applications By Dave Shaffer vu tuan anh wrote: This is interesting article, I'd like it. Could you send me some SOA documents to my e-mail? Thanks alot.
	SOA Feature Story: Real-Time SOA Starts with the Messaging Bus! By Gerardo Pardo-Castellote Casual Visitor wrote: TCP does not line up a message on one connection after a file transfer on another connection. Each TCP connection forms its own in-order transfer. If you want to convince people to buy your product, you should avoid putting incorrect information in the ...
	SOA Governance vs SOA Management By Sean Rhody Andrew Dennis wrote: Sean, Thanks for the insightful article about the meaning of governance. I have been collecting examples of SOA Governance definitions and metaphors, many of which are both colorful and even useful. You might find them of interest. They are at: SOA Gove...
	Why Enterprise Architects Continue to Fall Short with SOA By David Linthicum IT Yoda wrote: I whole-heartedly agree, and will offer something that I didn't see a lot of, in your article: suggestions for how to start going about correcting the problem :-) First, EAs should consider looking at EA frameworks (i.e. TOGAF, Zachman, etc.) and EA-level tool...
	Service Oriented Infrastructure (SOI) By Yoav Dembak amanfromMars wrote: Yoav, Seems to me like your Planning a New World Order Program or Failing having the Wherewithall for that, most certainly Providing the Proxy Facility for one to be Seamlessly Virtually Integrated into the Intelligence Environment. MeThinks for that to be T...