Professional Web Services Security

Web Services is a new paradigm that has evolved over the years. With successful demonstration of its proof of concept, Web Services are gradually moving towards occupying an important mechanism for e-commerce, because of the industry's awareness of its potential for integration. This book presents secure web services for e-commerce along with their implementation details. Security is a not only a prime requirement to implement e-business, but also an important concern due to the fact that Web Services can penetrate through firewalls. XML based standards have evolved to cater to the security needs in Web Services, to supplement traditional proven techniques.

Ben Galbraith Before graduating from high school, Ben Galbraith was hired by a major Silicon Valley computer manufacturer to develop Windows-based client-server applications with international deployments and hundreds of users. In 1995, he began developing for the Web and fell in love with Unix, vi, and Perl. After building countless web applications with Perl, Ben discovered server-side Java in 1999 and his relationship with Perl has since become somewhat estranged.

Mr. Galbraith is presently a consultant in Provo, Utah. He regularly lectures, evangelizes and gives classes on Java technology. Ben has no college degree but if he had the time he would study both ancient and modern history.

Whitney Hankison Whitney is a Systems Analyst with the County of Santa Barbara in Santa Barbara, California, USA. She has authored on Professional Windows DNA, and Professional VB.Net 1st and 2nd editions for Wrox Press. Her articles are featured on the webservicesarchitect.com site and are contained is featured in the book Web Services Business Strategies and Architectures by Expert Press. She can be reached at whankison@earthlink.net.

Andre Hiotis Andre Hiotis is an independent Technical Architect who enjoys working with leading edge technologies and using them to solve practical problems that benefit individuals, organizations, and society. Andre enjoyed his stay in Silicon Valley, during the dotcom era, working on wireless, security, and web services initiatives. Currently he is using his experience in developing a P2P network for the fight against terrorism that makes practical use of the Semantic Web, Security, P2P, and Wireless technologies in solving an information integration problem.

Murali Janakiraman Murali Janakiraman has been with Rogue Wave for seven years, and is currently a Software Architect for the XML Products team in Corvallis, Oregon. During his tenure at Rogue Wave, Murali has been a developer, senior developer, and technical lead on almost all of Rogue Wave's database products and XML products. Murali has a Bachelor's degree in Mechanical Engineering from Anna University at Chennai, India, and a Masters degree in Computer Science from Portland State University. He has spoken in various XML conferences such as XML-Europe, web services Edge, Software Development, and in various Web seminars. Murali is currently focussed on Web Services and related XML technologies. His other areas of interest include databases, distributed transactions, and object-relational mapping. Murali is a member of the W3C XML Protocol working group.

Prasad D. V. Besides being an author on .NET technologies, Prasad is a Senior Accounting and Audit professional (a qualified Chartered Accountant in India) with twenty three years of experience in the field of Financial Consulting and over six years of progressively responsible experience in the design and development of business applications software.

He has expertise in the use of Internet technologies and client-server applications with excellent command over Java 2.0, ASP, Visual Interdev 6.0, COM, ADO, VB 6.0/5.0, RDO, IIS 5.0, MS SQL Server 2000, JavaScript, VBScript and .NET Technologies. He has put in place a clutch of ASP.NET web services, which have been listed in XMethods.Com and are being widely used by developers and research scholars to test their real world applications. He was also actively involved in the development of a commercial collaborative computing product called vTrack for Vapor Solutions, an Austin Texas based company.

Ravi Trivedi Ravi Trivedi is a Software Analyst for Hewlett Packard (HP), Bangalore. He holds a Masters degree in Computer Science from the Indian Institute of Science (IISc).He has been a team lead for UDDI4j and UDDI Team at HP. Ravi has been involved in developing web services infrastructure (UDDI and e-speak) and implemented some of the very first solutions in production using web services.

David Whitney David Whitney is a developer with a major aerospace subsidiary located in Oklahoma City and has been responsible for design, development, and support for numerous projects ranging from engineering analysis, system security, and e-commerce, using languages as old as the original FoxBase, and as contemporary as Java, with efforts in C++, Visual Basic, Active Server Pages, Uniface, SQL Server, and others along the way.

He’s been involved with computers and software development since he first tripped over his desk chair to volunteer for an after-hours computer program offered in the 10th grade, which was way back in 1980. When he’s not reviewing or writing for Wrox, or toiling away at his regular job, he’s busy serving as helpdesk, systems analyst, and network guru for his own mini home network of Linux, XP, and NT boxes, and a larger 'real' network at his church; all of which fall after his most important jobs as Daddy to his two fabulous kids, Matthew and Lane, and husband to wife Katherine.

Vamsi Motukuru Vamsi is currently the VP Engineering and CTO for Phaos Technology Corp, where he is responsible for product engineering, strategic product initiatives and security consulting services. He has extensive industry experience in building components and toolkits that enable other developers and software vendors to build security into their products. At Phaos, he led the development of the world’s first commercial hardware accelerated XML Signature and Encryption product.

Vamsi has a cross platform background in design, development and integration of security middleware covering security protocols, security architectures, public-key infrastructure technologies, data communications and distributed systems. He is currently focussed on building a plug gable componentized framework for securing web services and implementing Java security solutions for wireless devices.