 - WS-Security (Web Services Security) is a proposed IT industry standard that addresses security when data is exchanged as part of a Web service. WS-Security is one of a series of specifications from an industry group that includes IBM, Microsoft, and Verisign. Related specifications include the Business Process Execution Language (BPEL), WS-Coordination, and WS-Transaction.
WS-Security specifies enhancements to SOAP (Simple Object Access Protocol) messaging aimed at protecting the integrity and confidentiality of a message and authenticating the sender. WS-Security also specifies how to associate a security token with a message, without specifying what kind of token is to be used. It does describe how to encode X.509 certificates and Kerberos tickets. In general, WS-Security is intended to be extensible so that new security mechanisms can be used in the future.
The WS-Security specification is an activity of the Web Service Interoperability Organization (WS-I Organization) which is an industry-wide effort at standardizing how Web services are requested and delivered.
| LAST UPDATED: |
18 Aug 2002
|
 |
Read more about WS-Security:
|
|
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
 |
 |
| |
RELATED CONTENT
 |
The technology of Web Service Security
SOAP Web service messages frequently move through public channels and contain valuable information, therefore security technology has become...
|
|
Web 2.0 at the old ballgame
Major League Baseball adopts Web 2.0 to authenticate home run balls for fans and provide umpires with the latest game time weather reports.
|
|
SOA complicated by ESB proliferation
Despite technical adherence to standards, ESBs from different vendors still don't play well with others, argues John Michelsen, chief architect at...
|
|
|
