security management http://securitymanagement-strategy.com Wed, 14 Sep 2005 10:22:40 +0000 http://wordpress.org/?v=1.5.1.3 en Indigo Bits for MSDN Subscribers http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers-2.htm http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers-2.htm#comments Wed, 14 Sep 2005 10:22:40 +0000 security ">"">>>>The Avalon and Indigo Community Technology Preview is now available, but to MSDN subscribers only for now.  Sells is pushing content about the bits on the Indigo section of the Longhorn developer center on MSDN.

 

more…

Security Management

]]> http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers-2.htm/feed/ Why Use WS-Security and WSE http://securitymanagement-strategy.com/why-use-ws-security-and-wse-2.htm http://securitymanagement-strategy.com/why-use-ws-security-and-wse-2.htm#comments Wed, 14 Sep 2005 10:21:40 +0000 security ">"">>>>Benjamin Mitchell to get this article written.  Tell me what you think.  What benefits have you gained?  Are they in line with what is compiled in this article?

In my mind, the two most powerful new concepts that did not exist in previous distributed computing infrastructures in the Web Services Architecture is Policy and Message Level Security.  I describe policy simply i.e. the ability to describe how you communicate with a services beyond what data to send e.g. your security requirements.  As far as Message Level Security is concerned, I love:

  • the service oriented audit trail - the idea that intermediaries can put information in the message header stating what they have done with the message and then sign that additional information for auditing purposes
  • the flexibility of choosing what types of tokens you use to sign, encrypt, authenticate, and authorize with
  • the flexibility of choosing what parts of the message to sign and encrypt with what tokens

What strikes you about Message Level Security and policy?

 

more…

Security Management

]]> http://securitymanagement-strategy.com/why-use-ws-security-and-wse-2.htm/feed/ Tech Ed: BPI and Connected Systems http://securitymanagement-strategy.com/tech-ed-bpi-and-connected-systems-2.htm http://securitymanagement-strategy.com/tech-ed-bpi-and-connected-systems-2.htm#comments Wed, 14 Sep 2005 10:17:39 +0000 security ">"">>>>Connected Systems track last year was very successful.  There is a discussion on marrying the content from that track and the BPI track (Think BizTalk and Host Integration Server).  What are your thoughts?  What problems are you facing?  How would you like to see the solutions presented?  What did you like/not like about the track last year?

Let us know. 

 

P.S.  It blows me away that the one that I thought would be the last standing bachelor is getting hitched and now thinking of where he and his new partner may raise children…  You know who you are.  Congrats Mr C.V.  Here is to your current and future happiness!

more…

Security Management

]]> http://securitymanagement-strategy.com/tech-ed-bpi-and-connected-systems-2.htm/feed/ MTOM is now a Candidate Recommendation at the W3C http://securitymanagement-strategy.com/mtom-is-now-a-candidate-recommendation-at-the-w3c-2.htm http://securitymanagement-strategy.com/mtom-is-now-a-candidate-recommendation-at-the-w3c-2.htm#comments Wed, 14 Sep 2005 10:15:39 +0000 security ">"">>>>Gudge is the man!  Thanks for all your hard work.  Check out some of his early implementation code and samples.

MTOM (Message Transmission Optimization Mechanism) is now a Candidate Recommendation.

 more…

Security Management

]]> http://securitymanagement-strategy.com/mtom-is-now-a-candidate-recommendation-at-the-w3c-2.htm/feed/ Are you doing WSE work? Better start dialoging with Chris Keyser http://securitymanagement-strategy.com/are-you-doing-wse-work-better-start-dialoging-with-chris-keyser-2.htm http://securitymanagement-strategy.com/are-you-doing-wse-work-better-start-dialoging-with-chris-keyser-2.htm#comments Wed, 14 Sep 2005 10:14:39 +0000 security ">"">>>>Chris is doing a lot of real implementation work with WSE!  He just started blogging, and his content is already intense.  We have him slated for a formal article on MSDN for using SCT with virtual endpoints.  In the meantime, he is seeding you with knowledge today.  Get into the dialog. more…

Security Management

]]> http://securitymanagement-strategy.com/are-you-doing-wse-work-better-start-dialoging-with-chris-keyser-2.htm/feed/ What do you identify as? http://securitymanagement-strategy.com/what-do-you-identify-as-2.htm http://securitymanagement-strategy.com/what-do-you-identify-as-2.htm#comments Wed, 14 Sep 2005 10:13:39 +0000 security ">"">>>> more…

Security Management

]]> http://securitymanagement-strategy.com/what-do-you-identify-as-2.htm/feed/ DevCon Selling out Quickly http://securitymanagement-strategy.com/devcon-selling-out-quickly.htm http://securitymanagement-strategy.com/devcon-selling-out-quickly.htm#comments Wed, 14 Sep 2005 10:12:39 +0000 security ">"">>>>Dev Con for a week now, and we are already more than half way full.

A shameless plug for our co-sponsors.  If you are looking for formal training on XML, Web Services, or the CLR, sign up for the PluralSight Campsight event.

more…

Security Management

]]> http://securitymanagement-strategy.com/devcon-selling-out-quickly.htm/feed/ WS-Eventing implementation http://securitymanagement-strategy.com/ws-eventing-implementation.htm http://securitymanagement-strategy.com/ws-eventing-implementation.htm#comments Wed, 14 Sep 2005 10:09:39 +0000 security ">"">>>>WS-Eventing coming down the pipe.  What are your business needs?  Have you given us your WSE 3.0 wish list?

more…

Security Management

]]> http://securitymanagement-strategy.com/ws-eventing-implementation.htm/feed/ Indigo Bits for MSDN Subscribers http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers.htm http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers.htm#comments Wed, 14 Sep 2005 10:07:38 +0000 security ">"">>>>The Avalon and Indigo Community Technology Preview is now available, but to MSDN subscribers only for now.  Sells is pushing content about the bits on the Indigo section of the Longhorn developer center on MSDN.

 

more…

Security Management

]]> http://securitymanagement-strategy.com/indigo-bits-for-msdn-subscribers.htm/feed/ Why Use WS-Security and WSE http://securitymanagement-strategy.com/why-use-ws-security-and-wse.htm http://securitymanagement-strategy.com/why-use-ws-security-and-wse.htm#comments Wed, 14 Sep 2005 10:06:38 +0000 security ">"">>>>Benjamin Mitchell to get this article written.  Tell me what you think.  What benefits have you gained?  Are they in line with what is compiled in this article?

In my mind, the two most powerful new concepts that did not exist in previous distributed computing infrastructures in the Web Services Architecture is Policy and Message Level Security.  I describe policy simply i.e. the ability to describe how you communicate with a services beyond what data to send e.g. your security requirements.  As far as Message Level Security is concerned, I love:

  • the service oriented audit trail - the idea that intermediaries can put information in the message header stating what they have done with the message and then sign that additional information for auditing purposes
  • the flexibility of choosing what types of tokens you use to sign, encrypt, authenticate, and authorize with
  • the flexibility of choosing what parts of the message to sign and encrypt with what tokens

What strikes you about Message Level Security and policy?

 

more…

Security Management

]]> http://securitymanagement-strategy.com/why-use-ws-security-and-wse.htm/feed/