473,657 Members | 2,419 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

What is the best way to secure Web Services

Hi Everyone:

We are looking to start writing some web services and I was wondering what
the standard practices for securing web services out there. I was thinking
that we could create a business partner id and password and authenticate
against a sql database. Can anyone tell me what they are using out there.
The services would be public internet, so WinNT Authentication won't work in
the situation.

thanks,
Anthony

Anthony J Biondo Jr
Product Manager of Web Services
Keystone Mercy Health Plan
Jul 20 '06 #1
2 1470
Take a look at the UserNameTokenMa nager example of samples for WSE 2.0
(if you're on .NET 1.1) or WSE 3.0 (if you're on .NET 2.0).

-Paul

Anthony Biondo Jr wrote:
Hi Everyone:

We are looking to start writing some web services and I was wondering what
the standard practices for securing web services out there. I was thinking
that we could create a business partner id and password and authenticate
against a sql database. Can anyone tell me what they are using out there.
The services would be public internet, so WinNT Authentication won't work in
the situation.

thanks,
Anthony

Anthony J Biondo Jr
Product Manager of Web Services
Keystone Mercy Health Plan
Jul 20 '06 #2
Hi Anthony,

Yes, there are some standar practices for securing web services. You will
find anything you need in this link,
http://msdn.microsoft.com/library/en.../html/WSSP.asp
It is a document that describes the best security practices for web
services, it was written by the Patterns & Practices team. It also includes
excellent code samples.

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

"Anthony Biondo Jr" <an************ @kmhp.comwrote in message
news:%2******** ********@TK2MSF TNGP03.phx.gbl. ..
Hi Everyone:

We are looking to start writing some web services and I was wondering what
the standard practices for securing web services out there. I was
thinking
that we could create a business partner id and password and authenticate
against a sql database. Can anyone tell me what they are using out there.
The services would be public internet, so WinNT Authentication won't work
in
the situation.

thanks,
Anthony

Anthony J Biondo Jr
Product Manager of Web Services
Keystone Mercy Health Plan


Jul 21 '06 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

125
14703
by: Sarah Tanembaum | last post by:
Beside its an opensource and supported by community, what's the fundamental differences between PostgreSQL and those high-price commercial database (and some are bloated such as Oracle) from software giant such as Microsoft SQL Server, Oracle, and Sybase? Is PostgreSQL reliable enough to be used for high-end commercial application? Thanks
44
4199
by: lester | last post by:
a pre-beginner's question: what is the pros and cons of .net, compared to ++ I am wondering what can I get if I continue to learn C# after I have learned C --> C++ --> C# ?? I think there must be many know the answer here. thanks
4
1588
by: Jonah Olsson | last post by:
Dear All, I'm currently developing a solution where large amounts of personalised emails are being created (and no, this is not spam...) on the ASP.NET platform and being delivered by a Debian Linux server running Qmail and mySQL. Currently the .NET application just connects to the SMTP-port on the Linux server and sends each mail one by one. This creates an awful lot of traffic and isn't really a good way of handling >100.000...
8
3144
by: Midnight Java Junkie | last post by:
Dear Colleagues: I feel that the dumbest questions are those that are never asked. I have been given the opportunity to get into .NET. Our organization has a subscription with Microsoft that basically entitled to us to just about every .Net development tool you can imagine. I cant even begin to mention them. To begin with, my background is not that of a programmer, but a systems engineer and the closest I have come to "programming"...
1
8328
by: Mark Richards | last post by:
Hi, I am interfacing with another company using web services (they are a java shop). We've been doing this for over 2 years, but a couple months age we started getting this error randomly. It started getting more frequent, so I re-wrote the code from ASP to ASP.Net. The problem still continues. It appears that the problem happens most often if I make successive calls to their server in a short time frame (but not always). They claim...
17
19654
by: seberino | last post by:
How can a proprietary software developer protect their Python code? People often ask me about obfuscating Python bytecode. They don't want people to easily decompile their proprietary Python app. I suppose another idea is to rewrite entire Python app in C if compiled C code is harder to decompile. Any ideas?
12
1868
by: MrQuan | last post by:
G'day all, I have a requirement to communicate between two or more PCs over the Internet, however I have no idea how to go about this. I'm not talking about a chat programme as such, I want to have an application running 24/7 on a 'base PC' connected to the internet that can send out data (like a monitoring application). It's not designed for chatting, but sending data used by my application (this can be in the form of a binary file...
6
1632
by: =?Utf-8?B?Q3JhaWc=?= | last post by:
If I have an application that I send out to users, and the application interacts with the database (behind the scenes, no direct sql creation by the users)....do webservices make the app more secure? I always thought of webservices as just a good way to allow users to have an API for them to interact with the database, but are webservices useful if the user never really knows that they are there?
6
1523
by: BJ | last post by:
I just started this week on a new project. The existing project uses BEA Tuxedo as a second layer service broker. The clients make calls to the Tux services which in turn retrieves data from an Oracle DB. My job is to support the current application and possibly upgrade teh client app to .Net. I have a few options: I can rewrite the client desktop application .in Dot Net (FW3.0) utilizing the same Tux calls or Write a new desktop...
0
8402
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8315
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8829
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
8734
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
8608
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
5633
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4164
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
2733
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
1627
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.