Good start before securing SOA
The main goal of this book (as stated in introduction section) is to give a reader good background knowledge on security in order to facilitate the implementation of security in SOA-based systems. This book is not for security experts, it is more for people who have to deal with security without having previous experience. It helps to answer the questions like how to secure collaborating Web services, what are the common practices.
Nevertheless, the book does not cover all the topics, however, mostly the basic ones. I found this book helpful to understand the fundamental instruments used in SOA security and continued with my own more specific and advanced solutions.
good book
Security is indespensable for web services, but difficult to understand and use. There are too many standatds relevant to security, W3C standards and OASIS. I think to understand whole structure need much time. It seems architecture or principle is required to consistent understanding. This book is good to grasp security standard structure. It is regrettable that this book seems written before 2007, the rush of new standards. I hope this book is maintained to the latest standards. Nonetheless it is good for readers to understand security standards structure.
Disappointing title.
If you are really serious about building security to your SOA stack of applications, then this book would offer only a hello world to security. All you find is a full-blownup security chapter for XML Web services beyond that nothing more. More importantly this book is completely disorganized...all I saw is the basic XML Web services security using out-of-box Axis examples. To the most disappointment, there is no chapter to show how to put-to-gether all these APIs in a real world SOA (as they claim in the title). Why should I read the book if it is repeating the API examples from Axis. This book is nothing but a theoretical junk with no proof. After browsing all the pages, I don't find anything which show how to build a SOA security architecture. The word security is abused and does'nt make sense for this title.
Misleading title and poor examples
This book is titled wrong. This books claims coverage on building SOA security, it does not dig into the security features of SOA. Particularly there is no discussion on strategies for securing BPM workflows, SOA governance,identity mgmt via SSO and federation etc and how to ensure security at all integration tiers. This book only offers security examples using Apache Axis beyond that YOU WILL BE BORED.
Detailed hands-on book
This is an excellent book with a lot of detail. The first few chapters given a good background on SOA and Security issues and challenges around Services.
(7 reviews)
