Tips to Deploy Web Services Security

The Secure Web Services Deployment System
Tips to Deploy
Web Services Security
John Lilly, CTO, Reactivity, Inc.
ABSTRACTIt's easy to build custom Web services or expose available Web services in packaged applications. The challenges begin when Web services move from the lab into the fray of day-to-day business operations. Without smooth and efficient coordination of people, process and technologies, the Web services are stuck in the lab, or worse, deployed vigilante style. This white paper discusses the three critical Web services deployment issues-security, provisioning connections, and operations. As each is owned by different factions within an enterprise, each can become a "show stopper" to Web services deployment initially, and every time a change must be made.
This white paper will provide five tips for maximizing Web services through effective deployment, and along the way, provide a case study of how each was achieved by Aeroplan, Canada's leading loyalty program and a wholly owned subsidiary of Air Canada.
Reactivity, Inc. © 2004, Reactivity, Inc.The Secure Web Services Deployment System
Contents
Introduction ................................................................................................................... 3It's Hard to Make Something Easier....................................................................................... 3Tips & Tricks for Deployment Success.................................................................................... 4Tip: Ensure That Your Systems Minimize the Impact of Web Services Interoperability Issues ............... 5Tip: Implement Scalable Security from the Start...................................................................... 7Trick - Support the Most Relevant Security Standards for Your Business......................................... 7Trick - Plan a Defense Against XML Threats in Advance of an Attack............................................. 8Trick - Ensure That your Web Services Integrate with Your Trust Infrastructure................................ 8Trick - Ensure That your Security Technology and Processes for Web Services Scale.......................... 9Tip: Provide Operators, Architects and Business Units Visibility into Transaction Traffic .................... 10Tip: Ensure that Operations Staff Can Run and Scale Your Web Services ........................................ 10Tip: Enable Efficient Cross-Organizational Collaboration to Change and Expand Your Web Services....... 12One Solid Solution............................................................................................................ 13Trick - Maximize Your ROI to Deliver Secure Web Services Connections with Reactivity...................... 14For More Information ........................................................................................................ 14
Reactivity, Inc. Tips to Deploy Web Services Security 2The Secure Web Services Deployment System
Introduction
Forrester Research and Gartner, Inc. forecast that 80 to 90 percent of Fortune 500 enterprises expect to have Web services by 2005. This is only the beginning, however. Web services can become a landscape-changing competitive asset IF they are deployed thoughtfully, securely, and with scalability in mind.
It's easy to build custom Web services or expose available Web services in packaged applications. The challenges begin when Web services move from the lab into the fray of day-to-day business operations. This white paper will expose often-overlooked challenges that occur during Web services deployment into production environments and provide tips and tricks for managing those challenges to maximize the benefits from Web services.
It's Hard to Make Something Easier
Web services are relatively easy to build. Every major development platform provides Web services interfaces and tools, ranging from WebSphere to Microsoft .NET to packaged software applications such as SAP NetWeaver and Siebel. Deploying those easy-to-build Web services, however, is a different story. There are several reasons why:
. The enterprise must align cross-organizational policies, technologies and personnel. The enterprise must coordinates the necessary policy definitions and approvals from all relevant functional business units that will provision, secure and operate the Web services. . The enterprise requir... [download for more]