Securing Web Services – NIST’s Perspective
by
Charlie Bess
There are a couple of areas related to web services and having a service oriented architecture that seem to come up as concerns again and again, those are governance and security. I’ve written about the governance issue before, but came across the NIST Guide to Secure Web Services.
In the introduction it states:
The security challenges presented by the Web services approach are formidable and unavoidable. Many of the features that make Web services attractive, including greater accessibility of data, dynamic application-to-application connections, and relative autonomy (lack of human intervention) are at odds with traditional security models and controls.”
If you’re in the process of architecting solutions around web services, it appears to be worth a review. It expects a minimal level of understanding of web services, and if nothing else provides a long list of references, risks and definitions in its appendices, to further your understanding.
