Open standards have gained momentum among enterprises as a mechanism for Web services to communicate with partners, customers, and suppliers. XML, Simple Object Access Protocol (SOAP), and HTTPS are among the technologies for developing interoperable Web services.
The inherent openness of Web services, however, poses security risks. Without proper protections, Web services can expose vulnerabilities that could lead to dire consequences. Ensuring that those services and their communications are integral, confidential, and secure is critical for all parties.
Through an example of a stock-quote service, a recent Sun Developer Network tutorial, Securing Communications in Web Services, steps you through the process of securing communications between a service's client and server providing a Web service.
The tutorial uses the Sun Java System Access Manager, the NetBeans IDE 5.5, and the Java Application Platform Software Development Kit (SDK) with Tools bundle.
What methods do you use to secure Web services in your projects?