Welcome!

Java Authors: Jeremy Geelan, Liz McMillan, Yakov Fain, Hari Gottipati, Tad Anderson

Related Topics: Java, Security

Java: Article

Forum Systems Releases Java Web Services Security

Tool Enables Developers To Shorten Development Lifecycle And Maintain Control Over Message Security
By Java News Desk, RIA News Desk
Article Rating:
June 1, 2006 02:00 AM EDT
Reads:
 8,774
Forum Systems  released the Forum Java Web Services Security (JWSS) Software Development Kit (SDK) version 1.0 offering developers a comprehensive library of application programming interfaces (API's) to leverage in coding Web Services applications. The JWSS SDK v1.0 addresses the need for security to be enforced within the application itself in order to ensure privacy and integrity of Web Services and SOA applications.

Forum JWSS SDK v1.0 allows developers to administer and apply security policies within J2EE compliant Application Servers using a declarative security model and API's for XML message authentication and authorization. The Application Server is then responsible for applying these security constraints to the code at runtime. Adding XML security within business logic prevents transactions from bypassing third-party enforcement points that would violate regulatory compliance or work flow security. Companies should complement this developer-centric approach with an "interception" model using a SOA Gateway or XML Firewall within a DMZ (Demilitarized Zone) for a global and scalable SOA security and acceleration strategy.

"There are business applications in which security must be enforced at the exact location where information is being processed for privacy reasons," said Walid Negm, vice president of marketing for Forum Systems. "In certain financial services and government settings, the origin of messages must be verified at the point of consumption to ensure that they were not physically intercepted. When using XML Encryption within the application, Forum's JWSS SDK v1.0 equips the developer with XML security functionality to decipher and verify the message contents," Negm added.

Published June 1, 2006 – Reads 8,774
Copyright © 2006 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.

More Stories By Java News Desk

JDJ News Desk monitors the world of Java to present IT professionals with updates on technology advances, business trends, new products and standards in the Java and i-technology space.

More Stories By RIA News Desk

Ever since Google popularized a smarter, more responsive and interactive Web experience by using AJAX (Asynchronous JavaScript + XML) for its Google Maps & Gmail applications, SYS-CON's RIA News Desk has been covering every aspect of Rich Internet Applications and those creating and deploying them. If you have breaking RIA news, please send it to RIA@sys-con.com to share your product and company news coverage with AJAXWorld readers.

Comments (3) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

Most Recent Comments
alen_smith 12/02/08 09:26:48 PM EST

hello.
I am alen smith.I am a java developer.
I want ask a question,that why we must use jsf when we have powerful j2ee frame work such as shine or struts?

A few days ago,I see a document about a new J2EE FRAMEWORK with name shine.
that`s support team say :
this frame work is a powerful framework with easyest way to use.
they say: shine include MVA,Service Oriented Scope,Jwms(java web model service) and ...

I thirsty for what is JWMS? and I want to know his FRAMEWORK how support SERVICE ORIENTED SCOPE?

this questions Intrested me about attaining more information about shine framework.
when I searching about shine in internet and sourceforge.net,I sow sevral document about that
,but one of them was more intresting for me ,that was Learning shine Frame work.
I can`t remember exactly but I think that writen via SHINE FRAMEWORK`s supprt team.

this document have a SIMPLE HELLO WORD project that Implemented with shine framework.

it`s realy intrest for me.
when I read it and try to deploy that sample with shine ,I understand that I find my favorite framework for
Implementing my J2EE projects.

but I can`t use it now.because of shine is not yet reliable because it`s new and untried.

but I thing this framework will be one of powerfull J2EE FRAMEWORKs as soon as soon.maybe shine
is the best J2EE Framework in near FUTURE.

this framework is very intrested for me and I write this document for all developers that want to find
a powerfull J2EE framewok for his/her projects.

I give All of my information about shine to you.
please if you finde a new document about shine or other new J2EE framework send it to my email for me.
I will happy when I see new information about shine or other new J2EE frameworks.

shines framework Address in sourceforge.net is:
sourceforge.net/search/?type_of_search=soft&words=shine

I find this information in this Address:
j2sos.org

good lock.
your friend: alen smith
Tieu Luu 06/05/06 11:29:34 PM EDT

Looks interesting. Definitely see a need for this type of tool. Wonder how it compares to XWS Security in the Java Web Services Developer Pack. More thoughts here... http://thluu.blogspot.com/2006/06/java-sdk-for-web-services-security.html
java news desk 06/01/06 02:46:47 AM EDT

Forum released the Forum Java Web Services Security (JWSS) Software Development Kit (SDK) version 1.0 offering developers a comprehensive library of application programming interfaces (API's) to leverage in coding Web Services applications. The JWSS SDK v1.0 addresses the need for security to be enforced within the application itself in order to ensure privacy and integrity of Web Services and SOA applications.