By their Web Services security testing tools shall you know them
If you want to find out how many people are deploying Web Services and are taking security seriously, what better way than to track the downloads of a Web Services security client. This is what we've been doing here at Vordel.
SOAPbox usage figures reveal that the financial services sector leads the field in Web Services adoption, with 23% of the total. Next is the public sector, with 15%, telecommunications third at 12%, and manufacturing 10%. Other interesting data indicates that when it comes to Web Services, the Europeans are not following the traditional pattern of delaying the adoption of newer technologies. With 48% of SOAPbox users located in Europe, they appear as keen to adopt Web Services technologies as their peers in North America, where 41% of SOAPbox users reside.
[ http://www.xmlmania.com/news_article_1438-Vordel-s-Web-Services-Security-Test-Tool-Reveals-High-Adoption-Rates.php ]
In case you don't know about SOAPbox, here is a screenshot of it below. In the screenshot, I am sending a digitally-signed SOAP message to a Web Service which is exposed by the Microsoft WSE 2.0 toolkit. The SOAPbox highlights (in yellow) the signed content in the SOAP request message, when I click on the "Signature" element.
Using the SOAPbox, I can configure authentication, both transport-level and message-level. I can also import keys for signing XML content, and I can attach attachments to SOAP messages.
Basically, the SOAPbox is a secure Web Services client. If you have set up a security policy at your Web Service using a tool such as VordelSecure, you can use the SOAPbox to test the security from the client side. It is an awful lot easier than coding up a client application, and is much more intuitive than working with Notepad and TCPtrace. And it's free! Check out www.vordel.com for downloads of SOAPbox.
|
