Security Practices for Web Services (Part 1): Now I Understand

Security is the most mature area of the Web Services architecture and it should be. However, getting up to speed on what security means in a Web Services world is a daunting task. This session (of a two part session) is dedicated to covering the foundation for security in the Web Services architecture. Specifically covering encryption, integrity via digital signatures and using various credentials like Windows identity, X509 certificates and custom tokens for authentication and authorization. We will review several patterns for proper programming techniques. Use of the WSE will be shown. Other topics like choosing the right ciphering algorithm will be discussed. Walk away with a strong understanding of how to secure your Web Services.