February 21, 2008   Sign In |  About ebizQ |  Contact Us |  Join ebizQ Gold Club
Peter Schooff
Peter Twenty-Four Seven Security
Peter Schooff's blog is a daily look at what's going on in the world of computer security with an emphasis on how it affects businesses.

« Trust No One: A Talk With Juniper Networks | Main | SOA Security Beyond the Perimeter: A Talk With Anne Thomas Manes »

February 19, 2008
What's So Funny About SOA Security?

First and foremost, the SOA security train is coming into the station one week from tomorrow, February 27th, and I hope you'll all be there for all the learning that'll going to be going on, learning that will undoubtedly help your earning, which you can do by just clicking here!

Also, this morning, I recorded a security podcast with the SOA extraordinare Anne Thomas Manes. We discussed various SOA security issues, and one of the more fascinating, and encouraging things, she related, was the fact that all the tools to secure SOA are already available, and all that's needed is implementation! Make sure you check in this Thursday when the podcast is live on ebizQ.

Now, back to El Blog. I was going to title this blog, "So when do you know your SOA security is enough," as that would have been more accurate, but I just liked this one better, taken, of course, from Nick Lowe via Elvis Costello's bombastic song, "What's so funny about peace, love, and understanding."

Last week I quoted from this document on various SOA security traps, and I just wanted to finish up with the point that, well, how do you know when you're done, how do you know when your SOA is secure enough to go for it!

While there are plenty of tools like penetration testing, vulnerability testing, source code analysis, touchpoint analysis, proof-of-concept, and third party reviews, the fact is, nothing can ever be 100 percent secure. To play on that classic line I once heard from a lawyer, I provide reasonable doubt at a reasonable price, in terms of SOA security, make sure you have reasonable security at a reasonable price. And just in case, make sure you have a contingency plan.

Posted by pschooff in |Digg This|Add to del.icio.us

Trackback Pings

TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/3161

Comments Post a comment




Remember Me?

(you may use HTML tags for style)

We ask that you type your code (displayed below) in the text box.This code is an image that cannot be read by a machine. It prevents automated programs from submitting comments.


Code:



Most Recent ebizQ Blog Entries
ADVERTISEMENT
Subscribe
News Feed
Blog Roll
Blogosphere
This Work
Accountability:The opinions expressed in this blog are solely representative of the blog's author, and not of ebizQ

Subscribe to our Newsletters
ebizQ Weekly Gold Club Update
Live Webinar Updates
Updates from ebizQ Partners
ebizQ SOA Update
ebizQ BPM Update
ebizQ Security Update
ebizQ BI Update
ebizQ Open Source Software Update
Virtual Show Newsletter
ebizQ Web 2.0 and the Enterprise
Your E-mail Address:
BPM Basics for Dummies: Getting a Read on BPM
Date: Feb 26, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Roundtable: SOA Security - The Real Deal, or Much Ado About Nothing?
Date: Feb 27, 2008
Time: 12:00 PM ET
(17:00 GMT)

I WANT TO ATTEND
Archived Webinars | Upcoming Webinars

Marketing Solutions | Feedback | About ebizQ | Unsubscribe | Privacy Policy | Site Map