Web services security: beauty and the beast
As Web services applications began to be developed, vendors tried to outline ways to secure information at the application level. "Vendors have developed a broad suite of standards to protect Web services transactions," said Randy Heffner, an analyst with Forrester Research.
Lately, corporate interest in Web services has been rising -- and justifiably so. The advent of this new way of building applications promises to almost magically allow organizations to exchange information within their own systems with partners and customers.
While the potential benefits are noteworthy, these capabilities raise new security issues for many enterprises. "Web services punch holes in traditional security techniques," Jason Bloomberg, a senior analyst with market research firm ZapThink, told the E-Commerce Times.