Posted by jcn at 9:57 on Tuesday 12 August 
Op de serverside wordt gesproken over “software vendor Fortify Software claims that a wide variety of vulnerabilities in projects such as Struts, Hibernate, and Geronimo”. Ook het Spring framework bevat security issues. Op searchsoftwarequality.com wordt gesproken over “Critical security issues found in the Spring Framework”en “Keith Donald, principal software engineer at SpringSource, said they are working with security experts at Ounce Labs to raise awareness within the Spring community of these two issues.“
http://www.theserverside.com/news/thread.tss?thread_id=50237
http://searchsoftwarequality.techtarget.com/news/article/0,289142,sid92_gci1321417,00.html
Tags: Architectuur, Java Nieuws, Website
Posted by Ruud Steeghs at 10:08 on Monday 10 September
In dit artikel wordt ingegaan over hoe je HTTP webservices kunt gebruiken zonder daarvoor een (commerciele) webserver voor nodig te hebben. In bepaalde situaties uitermate krachtig!
Tags: Architectuur
Posted by Hans-Jürgen Jacobs at 11:42 on Tuesday 19 June
Building loosely coupled application architectures requires more than just separating your application into different layers. [devx.com]
Tags: Architectuur
Posted by Hans-Jürgen Jacobs at 20:46 on Thursday 7 June
In this interview with Artima, James Ward, Adobe’s Flex and Apollo evangelist, shares Adobe’s response to JavaFX, and highlights some similarities and differences between Flex and JavaFX. [artima.com] [Podcast]
Tags: Architectuur, Podcast
Posted by Ruud Steeghs at 14:01 on Wednesday 25 April
The Rational Unified Process for Service-Oriented Modeling and Architecture (RUP / SOMA) extends the RUP and adds steps, tasks and concepts for identifying, specifying and realizing services in a SOA. read more
Tags: Architectuur
Posted by Eric Gunnewegh at 8:59 on Tuesday 20 March
To define and describe a web-service API, many developers would use WSDL. Although WSDL is meant to be extensible to any protocol and message format, most people use it for HTTP GET/POST and SOAP, when writing to WS-* standards. On the other hand, developers writing a REST API using XML over HTTP typically don’t use WSDL, or any other standardized definition/description of the API. There will usually be some kind of human-readable documentation, but that’s as far as it goes.
See infoq.com
Tags: Architectuur
Posted by Barend Garvelink at 11:39 on Friday 9 March
Gunnar Peterson schrijft op zijn security blog een stukje over identity, tokens en impersonation.
Het gaat hier om de problematiek van het doorgeven van gebruikerscredentials in een gedistribueerd systeem. Bijvoorbeeld: GUI roept service aan, service roept vervolgservice aan; vervolgservice roept nog weer iets aan waarbij hij de credentials van de gebruiker nodig heeft.
Hoe zorg je nou dat die op een verantwoorde manier door je hele keten heen bij dat systeem terechtkomen? De posting linkt naar diverse achtergrondartikelen en al met al is het waardevolle "food for thought".
[On the road to delegation - learning from QMail]
Tags: Architectuur, security
Posted by Hans-Jürgen Jacobs at 11:10 on Wednesday 7 March
innoQ has released a new version of their Web Services Standards Overview poster, covering more than 60 specifications and standards. [infoq.com]
In Europe, we can mail you a paper copy (in DIN A0 format) via snail mail at the cost of shipping; [innoq.com]
Tags: Architectuur, Stuff
Posted by Hans-Jürgen Jacobs at 10:53 on Tuesday 27 February
In this article, InfoQ’s Stefan Tilkov, consultant at innoQ, proposes 10 principles to serve as a basis for SOA discussions. The list starts with Don Box’s four tenets (service with explicit boundaries, shared contract and schema, policy-driven, and autonomous) and expands them to include wire formats, document orientation, loose coupling, standards compliance, vendor independence, and metadata. [infoq.com]
Tags: Architectuur
Posted by Barend Garvelink at 14:17 on Tuesday 13 February
Via het weblog van Gunnar Peterson kwam ik bij een artikel over het beveiligen van een webservices architectuur. Het behandelt een breed scala aan threats, tegenmaatregelen en standaards.
Security Concepts, Challenges, and Design Considerations for Web Services Integration
Tags: Architectuur, security, Webservices
