Oracle Web Services Manager

Cover -- Table of Contents -- Preface -- Chapter 1: Introduction to Web Services Security -- The Need for Web Services Security -- Security Challenges in a Web Services Environment -- The Need for Identity Propagation from Calling Application to Web Services -- Why HTTPS Based Security Is Not Enough -- Components of Web Services Security -- Authentication -- Authorization -- Confidentiality -- Integrity -- Return on Investment -- Summary -- Chapter 2: Web Services Security-Architectural Overview -- Overview of XML Security Standards -- Closer Look at SOAP Messages -- Authentication -- Confidentiality -- Integrity -- Overview of WS-Security Standards -- Implementing WS-*Security in Applications -- Centralized Management of WS-*Security -- The Need for Centralizing WS-*Security Operations -- Benefits of Centralizing Web Services Security Operations -- Introduction to Oracle Web Services Manager -- Summary -- Chapter 3: Architecture Overview of Oracle WSM -- Oracle WSM Architecture -- Oracle WSM Policy Manager -- Overview of Oracle WSM Policy Manager -- Relationship Between Policy and Service -- Oracle WSM Gateway -- Proxy, or Exposing Internal Service to External Business Partner, or Outside of Intranet -- Transport Protocol Translation -- Content Routing -- Summary -- Chapter 4: Authentication and Authorization of Web Services Using Oracle WSM -- Oracle WSM: Authentication and Authorization -- Oracle WSM: File Authenticate and Authorize -- Oracle WSM: Active Directory Authenticate and Authorize -- Oracle WSM: Policy Template -- Oracle WSM: Sample Application AD Authentication -- Web Service Security Policy -- Oracle WSM Test Page as Client Application -- Microsoft .NET Client Application -- Summary -- Chapter 5: Encrypting and Decrypting Messages in Oracle WSM -- Overview of Encryption and Decryption -- Symmetric Cryptography -- Asymmetric Cryptography -- Oracle WSM and Encryption -- Encryption and Decryption with Oracle WSM -- Encryption Algorithm -- Key Transport Algorithm -- Internal Working of the XML Encrypt Policy Step -- Oracle WSM Sample Application Overview -- Oracle WSM Encryption and Decryption Policy -- Creating the Security Policy -- Oracle WSM Test Page as Client Application -- Microsoft .NET Client Application -- Summary -- Chapter 6: Digitally Signing and Verifying Messages in Web Services -- Overview of Digital Signatures -- Digital Signatures in Web Services -- Signature Generation Using Oracle WSM -- Sign Message Policy Step -- Internals of Sign Message Policy Step -- Signature Generation and Verification Example -- Registering Web Service with Oracle WSM -- Signature Verification by Oracle WSM -- Signature Generation by Oracle WSM -- Oracle WSM Test Page as Client Application -- Microsoft .NET Client Application -- Summary -- Chapter 7: Oracle WSM Custom Policy Step -- Overview of Oracle WSM Policy Steps -- Implementing a Custom Policy Step -- Extending the AbstractStep Class -- Deploying the Custom Policy Step -- Step Template XML File Creation -- Custom Policy Step Example: Restrict Access Based on IP Address to the Specified Method -- Extending the AbstractStep -- Testing the Custom Policy Step -- Summary -- Chapter 8: Deployment Architecture -- Oracle WSM Components.