There are a considerable number of options available to architects and developers when it comes to Web service security. The WEB SERVICE SECURITY guide helps developers and architects make the most appropriate security decisions in the context of the solution's requirements. This asset contains reliable, accurate guidance on how to design and implement secure Web services.

1. Chapter 1 Introduction

   1. Overview

   2. Common Scenarios

2. Core Web Service Security Patterns

   1. Chapter 2 Authentication Patterns

      1. Introduction
      2. Direct Authentication
      3. Brokered Authentication
      4. Brokered Authentication: Kerberos
      5. Brokered Authentication: X.509 PKI
      6. Brokered Authentication: Security Token Service (STS)
      7. More Information

   2. Chapter 3 Message Protection Patterns

      1. Introduction
      2. Data Confidentiality
      3. Data Origin Authentication
      4. More Information

   3. Chapter 4 Implementing Transport and Message Layer Security

      1. Introduction
      2. Implementing Direct Authentication with UsernameToken in WSE 3.0
      3. Implementing Message Layer Security with Kerberos in WSE 3.0
      4. Implementing Message Layer Security with X.509 Certificates in WSE 3.0
      5. Implementing Message Layer Security with a Security Token Service (STS) in WSE 3.0
      6. References for Transport Layer Security
      7. More Information

3. Additional Web Service Security Patterns and Guidance

   1. Chapter 5 Resource Access Patterns

      1. Introduction
      2. Trusted Subsystem
      3. Protocol Transition with Constrained Delegation Technical Supplement
      4. More Information

   2. Chapter 6 Service Boundary Protection Patterns

      1. Introduction
      2. Message Replay Detection
      3. Implementing Message Replay Detection in WSE 3.0
      4. Message Validator
      5. Implementing Message Validation in WSE 3.0
      6. Exception Shielding
      7. Implementing Exception Shielding
      8. More Information

   3. Chapter 7 Service Deployment Patterns

      1. Introduction
      2. Perimeter Service Router
      3. Implementing Perimeter Service Router in WSE 3.0
      4. More Information

   4. Chapter 8 Technical Supplements

      1. Introduction
      2. Kerberos Technical Supplement for Windows
      3. X.509 Technical Supplement
      4. More Information

1. Appendix Appendix

   1. Introduction

   2. Problem/Solution Index

   3. WSE 3.0 Security: Interoperability Considerations

   4. Policy Advisor for WSE 3.0

   5. Patterns: A Common Vocabulary for Information Technology Professionals

   6. Glossary

   7. References

2. Appendix Bibliography

   1. General Information

   2. Chapter 1, "Authentication Patterns"

   3. Chapter 2, "Message Protection Patterns"

   4. Chapter 3, "Implementing Transport and Message Layer Security"

   5. Chapter 4, "Resource Access Patterns"

   6. Chapter 5, "Service Boundary Protection Patterns"

   7. Chapter 6, "Service Deployment Patterns"

   8. Chapter 7, "Technical Supplements"

   9. Appendix

   10. Community Workspace and Wiki

3. Appendix Patterns & Pratices