Manveen Kaur's Blog

Community: Java Web Services and XML Archives

Sun's training offering on developing secure Java Web services

You're back from JavaOne, with buzz words of cool new technologies you heard about still ringing in your ears. Here you are sitting at your desk, thinking about all the cool stuff you wish you could learn.

Well, there is HOPE.

Did you know that Sun Microsystems Inc. offers comprehensive training and certification for several Java technology components and the Java Platform, Enterprise Edition (Java EE)?

What?

To add to the list of courses being offered in the Web Services learning path , is an offering on XML and Web Services security (DWS-4120-EE5) being offered in the Java EE track.

When?

Estimated to be on the training schedule mid June. Stay tuned!

Where?

Watch this space.

What will I learn?

As part of the course, you will learn to :

• Identify the need to secure web services
• List and explain the primary elements and concepts of application security
• Outline the factors that must be considered when designing a web service security solution
• Determine the issues and concerns related to securing web service interactions
• Evaluate the tools and technologies available for securing a Java web service
• Analyze the security requirements of web services
• Identify the security challenges and threats in a web service application
• Secure web services using application-layer, transport-layer security, and message-layer security
• Secure web services using the message security providers available in the Sun Java System Application Server
• Describe the concept of identity and the drivers behind identity management solutions
• Explain the role of the Access Manager in securing web services
• Illustrate identity management capabilities in the NetBeans environment
• Secure web services using the Username token profile
• Secure web services using SAML assertions and Liberty tokens
And if this isn't enough- there is another incentive as well. The course will also help in preparation towards the SCJDWS (Sun Certified Developer for Java Web Services) exam.



The students perform the course lab exercises using the NetBeans 5.5 Enterprise Pack Integrated Development Environment (IDE) and using AppServer 9.0 U1.

Cool stuff! Is there anything else you would want to learn?





Federated security in webservices across trusted domains

Posted by manveen on April 29, 2007 at 11:39 AM | Permalink | Comments (1)

Want to know how to build federated security in Web Services across trusted domains with WSIT?

See this screencast to learn how.

A little Background:

WSIT, is a short name for Web Services Interoperability Technology, an integrated part of GlassFish v2 M4.

It's an open source implementation of key WS-* technologies and provide first class interoperability between Sun's Web services stack and Microsoft Windows Communication Foundation, an integrated part of .NET 3.0 framework.

WS-Trust specifies a framework for broker trust across different security domains.

For introduction about using Netbeans, and introductory samples on creating and testing webservices using Netbeans and the WSIT, I encourage you to see these screencasts.

Your comments are welcome.





This work is licensed under a Creative Commons License.



Powered by
Movable Type 3.01D