What is Web Services Security?
Web Services Security is a somewhat overloaded term; it is both a market and a specific OASIS standard. The OASIS standard WS-Security is defined by LooselyCoupled as a Standards framework for secure web services, based on SOAP. WS-Security defines additional headers that can be added to a SOAP message to implement integrity and confidentiality in web services applications. It provides a foundation for further security specifications that are under development, including WS-Policy, WS-Trust and WS-Federation. Originally put forward by IBM, Microsoft and Verisign, WS-Security became the responsibility of the OASIS e-business standards body in July 2002. As a market, Web Services Security refers the set of technology solutions that enhance security, including authentication, authorization, privacy, non-repudiation and auditing, for Web services. These solutions are available in many forms ranging from XML Firewall appliances through enterprise software solutions from many different vendo
