Manage XML and Web Services Vulnerabilities with Intel Expressway Service Gateway's Security Capabilities
SOA Architecture Security Today
XML Web Services are the most widely accepted means of loosely coupling a myriad of applications. However, the standards-based cross-domain exchange associated with XML and Web Services expands the attack boundary of the applications. This is typically due to developers' lack of awareness regarding potential threats that may be exposed. In addition, there's limited availability of protocol standards in COTS applications right now.
XML Web Services generally offer a rich means of enforcing authentication, authorization, access control, confidentiality and message integrity at a granular level, by leveraging standards like WS-Security and SAML. The overwhelming complexity of these specifications makes it challenging for developers to design web services security into the applications.
Intel's Comprehensive Gateway Security
The Intel Expressway Service Gateway soft-appliance decouples security enforcement from applications and provides change management, compliance and control benefits. In addition, deploying Intel SOA Expressway to protect your web services offers the following benefits:
· WS-I Compliance verification
· WS-Security, SAML 1.1/2.0, WS-Security Policy standards support
· XML threat detection & XML threat prevention capabilities
· Quality of Service (QOS) capabilities, such as shaping and throttling
· Integration with major Identity & Access Management systems, permitting you to maximize your valuable investment in SOA security
Additional Information
Visit our companion Dynamic Perimeter site for additional information on: