|
Mastering Web Services Security
 |
Author: Bret Hartman, Donald J. Flinn, Konstantin Beznosov, Shirley Kawamoto
List Price: $40.00
Our Price: Click to see the latest and low price
ISBN: 0471267163
Publisher: John Wiley & Sons (06 January, 2003)
Edition: Paperback
Sales Rank: 314,699
Average Customer Rating: 3.4 out of 5
|
Customer ReviewsRating: 5 out of 5
Good Perspective on Securing Web Services Apps
Mastering Web Services Security provides a valuable enterprise perspective on building secure Web Services applications. Rather than focusing on a single technology like .NET or Java, the book provides useful real-world guidelines for building Web Service based systems that use many different products.Some previous reviews of this book thought that EASI was exclusively a description of the product from the authors' company. I didn't see it that way -- in fact, I didn't see any specific details describing vendor products based on EASI. I viewed EASI more as an architectural technique that can be applied to many vendor products. Different Web Services vendors of Service Oriented Architectures (SOAs) offer frameworks that look like EASI, which makes this book useful when evaluating those alternatives.
Rating: 4 out of 5
good for developers of complex secure WS applications
The book does a great job explaining how to build non-trivial WS systems that are secure from end to end. Instead of limiting the material to descriptions of SOAP-related technologies and their security (this is what the other books I've read on WS security do), the authors first explain how to secure quickly a simple homogenous (M$-based) WS application, then point out the problems with such a simple-minded approach, and then devote the rest of the book to the question of securing complex heterogeneous WS applications by putting all necessary pieces together. The first part also has a good introduction into the building blocks for WS security solutions, including not only SOAP and XML security, but also security of the underlying middleware technologies. Here, they could do a better job on going into more details about WS-Security spec and its friends. In the second part, they show how to use those building blocks together. Again, chapters on security of Java-based WS and the security interoperability lack a good structure and some times are just confusing. From reading the book, it became clear to me that WS security is yet another instance of the old problem of enterprise security integration, although with a SOAP twist. Therefore, many methods from middleware security can be used for securing WS applications. I would recommend reading this book only to those who build complex heterogeneous WS applications.
Rating: 2 out of 5
Quadrasis EASI Web services security - user guide !
This book covers the basics and fundamentals of Web services security and industry specs to an extent and quite good. This book promotes Quadrasis EASI security kit (like a UserGuide) which made me so annoying! It does not provide practical examples from industry leading security vendors like Netegity TransactionMinder, SunONE Identity server etc. If you are looking for implementing XML Security using Netegrity TransactionMinder, Microsoft Passport, SunONE Identity server..then this book is a WRONG CHOICE. You may find this book more appropriate if you are a Quadrasis user.
Similar Products
· Web Services Security
· Secure XML: The New Syntax for Signatures and Encryption
· Loosely Coupled: The Missing Pieces of Web Services
· Understanding Web Services: XML, WSDL, SOAP, and UDDI
· Securing Web Services with WS-Security : Demystifying WS-Security, WS-Policy, SAML, XML Signature, and XML Encryption
|
