SlideShare a Scribd company logo
Raastech, Inc.
2201 Cooperative Way, Suite 600
Herndon, VA 20171
+1-703-884-2223
info@raastech.com
Getting Started w/ Security for your Oracle SOA Suite Integrations
From Transport Protection to API Management
Wednesday, May 10, 2017
Session 6
11:30 am - 12:20pm
Amphitheater
© Raastech, Inc. 2017 | All rights reserved. Slide 2 of 78@Raastech
Agenda
1. Introduction
2. Security Essentials
3. Oracle Fusion Middleware Security Platform
4. Oracle Web Services Platform “Practical” Implementation
5. Oracle Web Service Manager
6. Custom Policies
7. Oracle API Gateway
© Raastech, Inc. 2017 | All rights reserved. Slide 3 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 4 of 78@Raastech
About Me
▪ Michael Mikhailidi
▪ 20+ years Oracle experience
▪ Extensive Oracle Fusion Middleware experience
▪ Oracle SOA Certified
▪ Past employment with Oracle, Rimini Street
© Raastech, Inc. 2017 | All rights reserved. Slide 5 of 78@Raastech
What’s it all about?
▪ Information & communication protection is important as never before
▪ They tell you that all the time
▪ Security standards are old and will stay there
▪ Learning curve is steep
▪ Old formats, lack of compatibility, layers of fossils
▪ Implementation issues
▪ On a residual basis
▪ Lack of resources
▪ Errors, backdoors, support
© Raastech, Inc. 2017 | All rights reserved. Slide 6 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 7 of 78@Raastech
Key Security Terms
▪ Public Key Infrastructure
▪ Asymmetric key exchange
▪ Published by Whitfield Diffie and Martin Hellman, in 1976
▪ Ron Rivest, Adi Shamir, and Leonard Adleman identified the same relationship in 1978 (aka RSA Corp)
▪ Standard X.509
▪ X.509 was initially issued on July 3, 1988
▪ Subset of X.500 standard
▪ Base for all the modern web of trust and certificates
▪ Secured Socket Layer/Transport Level Security
▪ Invented by Netscape in1994
▪ TLS was introduced in 1999
▪ SSL version 3 is no longer exists in public communications, TLS has version 1.2, 1.3 is coming
© Raastech, Inc. 2017 | All rights reserved. Slide 8 of 78@Raastech
Alice’s key for Bob
Certified by Rabbit
Rabbit’s public key
Alice & Bob Secret Correspondence
© Raastech, Inc. 2017 | All rights reserved. Slide 9 of 78@Raastech
Transport Level Security
▪ Transport level security in the most cases
▪ No certificate (Public key) required for client
▪ Client creates temporary private key for the
session
▪ Sends the key back to the server signed with
Server’s public key
▪ You still need PKI to validate server credentials
▪ Protects all the data exchange between server
and the client
▪ Requires configuration not development
▪ That’s why it’s the most popular solution
© Raastech, Inc. 2017 | All rights reserved. Slide 10 of 78@Raastech
Service and Message Protection
▪ Service Protection
▪ User Authentication
▪ User Authorization
▪ Session Validation
▪ Message Protection
▪ Message encryption
▪ Message nonrepudiation (Signing)
▪ Guarantied Delivery (Reliability)
▪ Management Tasks
▪ Logging
▪ Audit
▪ Transformation
© Raastech, Inc. 2017 | All rights reserved. Slide 11 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 12 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Authentication
▪ Single Sign-On
▪ Authorization
▪ Audit
▪ Credential Store Framework
▪ Identity Governance Framework
▪ Cryptography
▪ Management
▪ Security Providers
▪ Security Stores
© Raastech, Inc. 2017 | All rights reserved. Slide 13 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Users & Groups
▪ Credentials
▪ Security Providers
▪ Keystores
▪ Application Roles/Policies
© Raastech, Inc. 2017 | All rights reserved. Slide 14 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Users & Groups
▪ Credentials
▪ Security Providers
▪ Keystores
▪ Application Roles/Policies
© Raastech, Inc. 2017 | All rights reserved. Slide 15 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Users & Groups
▪ Credentials
▪ Security Providers
▪ Keystores
▪ Application Roles/Policies
© Raastech, Inc. 2017 | All rights reserved. Slide 16 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Users & Groups
▪ Credentials
▪ Security Providers
▪ Keystores
▪ Application Roles/Policies
© Raastech, Inc. 2017 | All rights reserved. Slide 17 of 78@Raastech
Oracle Platform Security Service (OPSS)
▪ Users & Groups
▪ Credentials
▪ Security Providers
▪ Keystores
▪ Application Roles/Policies
© Raastech, Inc. 2017 | All rights reserved. Slide 18 of 78@Raastech
How OWSM Works
▪ Web Service
▪ Published by web application
▪ WebLogic server runs application and WSM agent
– Separate application deployments for 3rd party servers
▪ WSM Agent enforces global & local policies
– Endpoints
– SOA Components
– Clients
▪ Web Service Client
▪ Accesses service endpoint
▪ Should follow policies to complete call
▪ WSM Policy Manager
▪ Manage policies
▪ Release policy information to agents
▪ Administrative GUI through Fusion Middleware EM Control
▪ Web Service Clients
▪ WSM common and client policies
▪ Applies policies to the service references
© Raastech, Inc. 2017 | All rights reserved. Slide 19 of 78@Raastech
How OWSM Works
1. Client sends a request message to a web service.
2. Policy interceptors intercept and execute the policies
attached to the client.
3. Request message is then sent to the web service.
4. Policy interceptors then execute any service policies
attached to the web service.
5. Web service executes the request message and returns
a response message.
6. Response message is intercepted by the policy
interceptors which execute the service policies
attached to the web service.
7. Response message is then sent to the client.
8. Policy interceptors then execute any client policies
attached to the client.
9. Response message is passed to the client.
© Raastech, Inc. 2017 | All rights reserved. Slide 20 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 21 of 78@Raastech
Yet Another “Hello World” Example
© Raastech, Inc. 2017 | All rights reserved. Slide 22 of 78@Raastech
HelloWorld WSDL
© Raastech, Inc. 2017 | All rights reserved. Slide 23 of 78@Raastech
Let’s say “Hello”
© Raastech, Inc. 2017 | All rights reserved. Slide 24 of 78@Raastech
Pit Stop: How to find the right policy?
▪ Large number policies are predefined and ready to use
▪ 55 security policies are predefined in OWSM
▪ Policy templates, to tailor policies that fits your requirements
▪ Oracle recommends to follow naming convention
▪ Helps you understand what policy does by name
▪ Folder-like organization keeps policies organized
oracle/wss_saml_or_username_token_over_ssl_service_policy
Folder Standard Policy OR policy Policy
Enforcement
point
Transport Type
© Raastech, Inc. 2017 | All rights reserved. Slide 25 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 26 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 27 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 28 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 29 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 30 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 31 of 78@Raastech
Apply OWSM Policy to the Service Endpoint
© Raastech, Inc. 2017 | All rights reserved. Slide 32 of 78@Raastech
HelloWorld WSDL with Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 33 of 78@Raastech
How to say “Hello” now
© Raastech, Inc. 2017 | All rights reserved. Slide 34 of 78@Raastech
How to say “Hello” now
© Raastech, Inc. 2017 | All rights reserved. Slide 35 of 78@Raastech
How to say “Hello” now
© Raastech, Inc. 2017 | All rights reserved. Slide 36 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 37 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 38 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 39 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 40 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 41 of 78@Raastech
Apply OWSM Policy at Design Time
© Raastech, Inc. 2017 | All rights reserved. Slide 42 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 43 of 78@Raastech
▪ HelloWorldService reference
▪ Don’t forget to use protected URL
▪ BPEL process to call service
▪ Mediator is too simple
▪ Service Reference to expose process
Not So Simple Composite
© Raastech, Inc. 2017 | All rights reserved. Slide 44 of 78@Raastech
Not So Simple Composite
▪ Now we select service reference – apply the same policy – with client flavor
© Raastech, Inc. 2017 | All rights reserved. Slide 45 of 78@Raastech
Not So Simple Composite
▪ Client side require bit more configuration
▪ Click on pencil icon
▪ Override cf-key value with credentials alias
▪ Let’s say wlsadmin
▪ And save policy
© Raastech, Inc. 2017 | All rights reserved. Slide 46 of 78@Raastech
Not So Simple Composite
▪ Lock icon on the reference means:
▪ Policy has ben attached
▪ One more step before deployment
© Raastech, Inc. 2017 | All rights reserved. Slide 47 of 78@Raastech
Not So Simple Composite
▪ Time to recall OPSS features
▪ Navigate to Weblogic Domain > Security >
Credentials
▪ Create new key
▪ With еру appropriate credentials
▪ Save the key
▪ Now we are ready for deployment
▪ And if you don’t have oracle.wsm.security
map: Don’t be shy – create it!
© Raastech, Inc. 2017 | All rights reserved. Slide 48 of 78@Raastech
Not So Simple Composite
▪ Time to recall OPSS features
▪ Navigate to Weblogic Domain > Security >
Credentials
▪ Create new key
▪ With еру appropriate credentials
▪ Save the key
▪ Now we are ready for deployment
▪ And if you don’t have oracle.wsm.security
map: Don’t be shy – create it!
© Raastech, Inc. 2017 | All rights reserved. Slide 49 of 78@Raastech
Let’s say hello again
▪ OWSM client call:
▪ No SSL
▪ No WS-Security
© Raastech, Inc. 2017 | All rights reserved. Slide 50 of 78@Raastech
Let’s say hello again
▪ However service gets all necessary headers from the client policy
© Raastech, Inc. 2017 | All rights reserved. Slide 51 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 52 of 78@Raastech
What if you need the policy that differs?
▪ You found a policy, it does what you need, but not exactly…
▪ Company security rules mandate: “No clear text passwords allowed”
© Raastech, Inc. 2017 | All rights reserved. Slide 53 of 78@Raastech
What if you need the policy that differs?
▪ The answer: Custom policies
© Raastech, Inc. 2017 | All rights reserved. Slide 54 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 55 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 56 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 57 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 58 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 59 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 60 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 61 of 78@Raastech
Customize Predefined Policy
© Raastech, Inc. 2017 | All rights reserved. Slide 62 of 78@Raastech
Homegrown OWSM Policies
▪ 3 components:
▪ Custom assertion executor
Java code, which implements your custom logic with OWSM Java API
▪ Custom policy file
XML document which defines bindings, parameters, and all that to
make assertion usable
▪ policy-config.xml
XML document you need to attach new assertion to the OWSM
repository
© Raastech, Inc. 2017 | All rights reserved. Slide 63 of 78@Raastech
How to manage hundreds of services?
▪ You have lot of services and don’t want to enforce all the policies
manually
▪ All company services should be compliant to set of policies
▪ But not all of them
The answer: Globally attached policies
© Raastech, Inc. 2017 | All rights reserved. Slide 64 of 78@Raastech
Policy Sets
▪ Contains one or more policies
▪ Defines subject to apply:
˗ SOA Component
˗ SOA Reference
˗ SOA Service
˗ Web Service Endpoint
˗ Web Service Client
˗ Web Service Connection
˗ Asynchronous Callback Client
▪ Describes subject scope
▪ Policies in set have selection filters
© Raastech, Inc. 2017 | All rights reserved. Slide 65 of 78@Raastech
Apply Global Policies to all Services
▪ You can use WLST
to create and
manage policy sets
© Raastech, Inc. 2017 | All rights reserved. Slide 66 of 78@Raastech
Apply Global Policies to all Services
▪ …or do the same from Fusion Middleware Control
© Raastech, Inc. 2017 | All rights reserved. Slide 67 of 78@Raastech
© Raastech, Inc. 2017 | All rights reserved. Slide 68 of 78@Raastech
OWSM on Steroids
▪ Secure enough to protect all your services
▪ Strong enough to live in DMZ
▪ Smart enough to take a share in routing and transformation
▪ Data reduction
▪ Protocol exchange
▪ API transformation
▪ Open enough to click into existing management framework
▪ Integration with Oracle Enterprise Manager
© Raastech, Inc. 2017 | All rights reserved. Slide 69 of 78@Raastech
API Gateway Architecture & Components
▪ Key components and tools
▪ API Gateway Manager
▪ Policy Studio
▪ API Gateway Analytics
▪ API Gateway Explorer
© Raastech, Inc. 2017 | All rights reserved. Slide 70 of 78@Raastech
API Gateway Architecture & Components
© Raastech, Inc. 2017 | All rights reserved. Slide 71 of 78@Raastech
API Gateway Architecture & Components
▪ API Gateway Manager
▪ Centralized web-based dashboard
▪ Control and manage API Gateways and groups in a domain
▪ Displays aggregated monitoring data from multiple API
Gateway instances
▪ Including real-time statistics, traffic log, log files, and alerts
▪ Manages, monitors, and troubleshoots the API Services that
are virtualized on the API Gateway
© Raastech, Inc. 2017 | All rights reserved. Slide 72 of 78@Raastech
API Gateway Architecture & Components
© Raastech, Inc. 2017 | All rights reserved. Slide 73 of 78@Raastech
API Gateway Architecture & Components
▪ Policy Studio
▪ Policy development and configuration for API and service protection
▪ Develops API Gateway policies and solution packs
▪ Customizes and extends the API Gateway using scripting
▪ Creates Java classes and/or custom filters using the API Gateway filter
SDK
▪ Typically on a separate machine from the API Gateway
© Raastech, Inc. 2017 | All rights reserved. Slide 74 of 78@Raastech
API Gateway Architecture & Components
© Raastech, Inc. 2017 | All rights reserved. Slide 75 of 78@Raastech
API Gateway Architecture & Components
▪ Oracle API Gateway Analytics
▪ Generate reports and charts based on usage metrics
▪ Database integration
▪ Oracle Database
▪ MySQL Server
▪ Microsoft SQL Server
▪ Real-time and historical metrics.
© Raastech, Inc. 2017 | All rights reserved. Slide 76 of 78@Raastech
API Gateway Architecture & Components
© Raastech, Inc. 2017 | All rights reserved. Slide 77 of 78@Raastech
References
▪ Basics and History of PKI
https://blogs.technet.microsoft.com/option_explicit/2012/03/10/basics-and-history-of-pki/
▪ Secure Socket Layer and Transport Socket Layer, by Jinwoo Hwang
http://www.ibm.com/developerworks/library/ws-ssl-security/
▪ Sample Formats
https://en.wikipedia.org/wiki/X.509
https://en.wikipedia.org/wiki/LDAP_Data_Interchange_Format
▪ WS-Security Specifications
https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss
▪ OPSS 11g Technical Whitepaper
http://www.oracle.com/technetwork/middleware/id-mgmt/opss-tech-wp-131775.pdf
▪ Understanding the OWSM Policy Framework
https://docs.oracle.com/middleware/1213/owsm/concepts/owsm-policy-framework.htm
▪ OWSM Role Authorization
http://www.oracle.com//technetwork/middleware/webservices-manager/soa-component-role-authz-1555950.pdf
▪ API Gateway Concepts
https://docs.oracle.com/cd/E65459_01/docs.1112/e65451/Default.htm#ConceptsGuideTopics/3_overview.htm
▪ Aaron Dolan. our API’s First Line of Defense: Oracle API Gateway
http://www.avioconsulting.com/blog/your-apis-first-line-defense-oracle-api-gateway
© Raastech, Inc. 2017 | All rights reserved. Slide 78 of 78@Raastech
Q&A

More Related Content

What's hot

Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...
Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...
Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...Revelation Technologies
 
The Road to Oracle SOA Suite 12c
The Road to Oracle SOA Suite 12cThe Road to Oracle SOA Suite 12c
The Road to Oracle SOA Suite 12cMichael Medin
 
Securing your Oracle Fusion Middleware Environment, On-Prem and in the Cloud
Securing your Oracle Fusion Middleware Environment, On-Prem and in the CloudSecuring your Oracle Fusion Middleware Environment, On-Prem and in the Cloud
Securing your Oracle Fusion Middleware Environment, On-Prem and in the CloudRevelation Technologies
 
Telco open stack use cases james thorne
Telco open stack use cases   james thorneTelco open stack use cases   james thorne
Telco open stack use cases james thorneSriram Subramanian
 
Introduction to Oracle Infrastructure as a Service
Introduction to Oracle Infrastructure as a ServiceIntroduction to Oracle Infrastructure as a Service
Introduction to Oracle Infrastructure as a ServiceTimothy Krupinski
 
Oracle Ravello Presentation 7Dec16 v1
Oracle Ravello Presentation 7Dec16 v1Oracle Ravello Presentation 7Dec16 v1
Oracle Ravello Presentation 7Dec16 v1Kurt Liu
 
Enterprise Ready OpenStack, Wiekus Beukes, Oracle
Enterprise Ready OpenStack,  Wiekus Beukes, OracleEnterprise Ready OpenStack,  Wiekus Beukes, Oracle
Enterprise Ready OpenStack, Wiekus Beukes, OracleSriram Subramanian
 
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA Suite
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA SuiteBest Practices for Building an Enterprise SOA Infrastructure on Oracle SOA Suite
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA SuiteMatt Wright
 
Compute Cloud Performance Showdown: Amazon Web Services, Oracle Cloud, IBM ...
Compute Cloud  Performance Showdown: Amazon Web Services, Oracle  Cloud, IBM ...Compute Cloud  Performance Showdown: Amazon Web Services, Oracle  Cloud, IBM ...
Compute Cloud Performance Showdown: Amazon Web Services, Oracle Cloud, IBM ...Revelation Technologies
 
Solaris 11.2 What's New
Solaris 11.2 What's NewSolaris 11.2 What's New
Solaris 11.2 What's NewOrgad Kimchi
 
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloud
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloudA1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloud
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloudDr. Wilfred Lin (Ph.D.)
 
Oracle cloud, private, public and hybrid
Oracle cloud, private, public and hybridOracle cloud, private, public and hybrid
Oracle cloud, private, public and hybridJohan Louwers
 
Netherlands Tech Tour 03 - MySQL Cluster
Netherlands Tech Tour 03 -   MySQL ClusterNetherlands Tech Tour 03 -   MySQL Cluster
Netherlands Tech Tour 03 - MySQL ClusterMark Swarbrick
 
Webinar: Cloud Data Masking - Tips to Test Software Securely
Webinar: Cloud Data Masking - Tips to Test Software Securely Webinar: Cloud Data Masking - Tips to Test Software Securely
Webinar: Cloud Data Masking - Tips to Test Software Securely Skytap Cloud
 
Oracle IaaS/PaaS - Experience Technology Night
Oracle IaaS/PaaS - Experience Technology NightOracle IaaS/PaaS - Experience Technology Night
Oracle IaaS/PaaS - Experience Technology NightLuis Albinati
 
Using MySQL Containers
Using MySQL ContainersUsing MySQL Containers
Using MySQL ContainersMatt Lord
 

What's hot (20)

Cloud Integration Strategy
Cloud Integration StrategyCloud Integration Strategy
Cloud Integration Strategy
 
Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...
Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...
Anyone Can Build a Site, Even You! Create a Microsite with Oracle Sites Cloud...
 
The Road to Oracle SOA Suite 12c
The Road to Oracle SOA Suite 12cThe Road to Oracle SOA Suite 12c
The Road to Oracle SOA Suite 12c
 
Securing your Oracle Fusion Middleware Environment, On-Prem and in the Cloud
Securing your Oracle Fusion Middleware Environment, On-Prem and in the CloudSecuring your Oracle Fusion Middleware Environment, On-Prem and in the Cloud
Securing your Oracle Fusion Middleware Environment, On-Prem and in the Cloud
 
Telco open stack use cases james thorne
Telco open stack use cases   james thorneTelco open stack use cases   james thorne
Telco open stack use cases james thorne
 
Introduction to Oracle Infrastructure as a Service
Introduction to Oracle Infrastructure as a ServiceIntroduction to Oracle Infrastructure as a Service
Introduction to Oracle Infrastructure as a Service
 
Oracle Ravello Presentation 7Dec16 v1
Oracle Ravello Presentation 7Dec16 v1Oracle Ravello Presentation 7Dec16 v1
Oracle Ravello Presentation 7Dec16 v1
 
Enterprise Ready OpenStack, Wiekus Beukes, Oracle
Enterprise Ready OpenStack,  Wiekus Beukes, OracleEnterprise Ready OpenStack,  Wiekus Beukes, Oracle
Enterprise Ready OpenStack, Wiekus Beukes, Oracle
 
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA Suite
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA SuiteBest Practices for Building an Enterprise SOA Infrastructure on Oracle SOA Suite
Best Practices for Building an Enterprise SOA Infrastructure on Oracle SOA Suite
 
Compute Cloud Performance Showdown: Amazon Web Services, Oracle Cloud, IBM ...
Compute Cloud  Performance Showdown: Amazon Web Services, Oracle  Cloud, IBM ...Compute Cloud  Performance Showdown: Amazon Web Services, Oracle  Cloud, IBM ...
Compute Cloud Performance Showdown: Amazon Web Services, Oracle Cloud, IBM ...
 
OpenStack & MySQL
OpenStack & MySQLOpenStack & MySQL
OpenStack & MySQL
 
Apex day 1.0 oracle cloud news_andrej valach
Apex day 1.0 oracle cloud news_andrej valachApex day 1.0 oracle cloud news_andrej valach
Apex day 1.0 oracle cloud news_andrej valach
 
Solaris 11.2 What's New
Solaris 11.2 What's NewSolaris 11.2 What's New
Solaris 11.2 What's New
 
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloud
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloudA1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloud
A1 keynote oracle_infrastructure_as_a_service_move_any_workload_to_the_cloud
 
Oracle Ravello
Oracle Ravello Oracle Ravello
Oracle Ravello
 
Oracle cloud, private, public and hybrid
Oracle cloud, private, public and hybridOracle cloud, private, public and hybrid
Oracle cloud, private, public and hybrid
 
Netherlands Tech Tour 03 - MySQL Cluster
Netherlands Tech Tour 03 -   MySQL ClusterNetherlands Tech Tour 03 -   MySQL Cluster
Netherlands Tech Tour 03 - MySQL Cluster
 
Webinar: Cloud Data Masking - Tips to Test Software Securely
Webinar: Cloud Data Masking - Tips to Test Software Securely Webinar: Cloud Data Masking - Tips to Test Software Securely
Webinar: Cloud Data Masking - Tips to Test Software Securely
 
Oracle IaaS/PaaS - Experience Technology Night
Oracle IaaS/PaaS - Experience Technology NightOracle IaaS/PaaS - Experience Technology Night
Oracle IaaS/PaaS - Experience Technology Night
 
Using MySQL Containers
Using MySQL ContainersUsing MySQL Containers
Using MySQL Containers
 

Viewers also liked

Implementing Applications with SOA and Application Integration Architecture
Implementing Applications with SOA and Application Integration ArchitectureImplementing Applications with SOA and Application Integration Architecture
Implementing Applications with SOA and Application Integration ArchitectureBob Rhubart
 
Oracle Service Bus and Oracle SOA Suite in the Mobile World
Oracle Service Bus and Oracle SOA Suite in the Mobile WorldOracle Service Bus and Oracle SOA Suite in the Mobile World
Oracle Service Bus and Oracle SOA Suite in the Mobile WorldGuido Schmutz
 
Oracle SOA, AIA & Fusion Apps
Oracle SOA, AIA & Fusion AppsOracle SOA, AIA & Fusion Apps
Oracle SOA, AIA & Fusion AppsPhil Wilkins
 
Oracle SOA Development - Hands-On from Start to Finish
Oracle SOA Development - Hands-On from Start to FinishOracle SOA Development - Hands-On from Start to Finish
Oracle SOA Development - Hands-On from Start to FinishRevelation Technologies
 
Where and when to use the Oracle Service Bus (OSB)
Where and when to use the Oracle Service Bus (OSB)Where and when to use the Oracle Service Bus (OSB)
Where and when to use the Oracle Service Bus (OSB)Guido Schmutz
 
Ebs soa con8716_pdf_8716_0001
Ebs soa con8716_pdf_8716_0001Ebs soa con8716_pdf_8716_0001
Ebs soa con8716_pdf_8716_0001jucaab
 
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPEL
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPELOracle Service Bus vs. Oracle Enterprise Service Bus vs. BPEL
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPELGuido Schmutz
 
Primavera integration possibilities technical overview ppt
Primavera integration possibilities   technical overview pptPrimavera integration possibilities   technical overview ppt
Primavera integration possibilities technical overview pptp6academy
 
Oracle SOA Suite in use – a practical experience report
Oracle SOA Suite in use – a practical experience reportOracle SOA Suite in use – a practical experience report
Oracle SOA Suite in use – a practical experience reportGuido Schmutz
 

Viewers also liked (10)

Implementing Applications with SOA and Application Integration Architecture
Implementing Applications with SOA and Application Integration ArchitectureImplementing Applications with SOA and Application Integration Architecture
Implementing Applications with SOA and Application Integration Architecture
 
Oracle Service Bus and Oracle SOA Suite in the Mobile World
Oracle Service Bus and Oracle SOA Suite in the Mobile WorldOracle Service Bus and Oracle SOA Suite in the Mobile World
Oracle Service Bus and Oracle SOA Suite in the Mobile World
 
Oracle SOA, AIA & Fusion Apps
Oracle SOA, AIA & Fusion AppsOracle SOA, AIA & Fusion Apps
Oracle SOA, AIA & Fusion Apps
 
Oracle SOA Development - Hands-On from Start to Finish
Oracle SOA Development - Hands-On from Start to FinishOracle SOA Development - Hands-On from Start to Finish
Oracle SOA Development - Hands-On from Start to Finish
 
Where and when to use the Oracle Service Bus (OSB)
Where and when to use the Oracle Service Bus (OSB)Where and when to use the Oracle Service Bus (OSB)
Where and when to use the Oracle Service Bus (OSB)
 
Ebs soa con8716_pdf_8716_0001
Ebs soa con8716_pdf_8716_0001Ebs soa con8716_pdf_8716_0001
Ebs soa con8716_pdf_8716_0001
 
Hands-On with Oracle SOA
Hands-On with Oracle SOAHands-On with Oracle SOA
Hands-On with Oracle SOA
 
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPEL
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPELOracle Service Bus vs. Oracle Enterprise Service Bus vs. BPEL
Oracle Service Bus vs. Oracle Enterprise Service Bus vs. BPEL
 
Primavera integration possibilities technical overview ppt
Primavera integration possibilities   technical overview pptPrimavera integration possibilities   technical overview ppt
Primavera integration possibilities technical overview ppt
 
Oracle SOA Suite in use – a practical experience report
Oracle SOA Suite in use – a practical experience reportOracle SOA Suite in use – a practical experience report
Oracle SOA Suite in use – a practical experience report
 

Similar to Getting Started with Security for your Oracle SOA Suite Integrations

Understanding and Developing Web Services - For DBAs and Developers
Understanding and Developing Web Services - For DBAs and DevelopersUnderstanding and Developing Web Services - For DBAs and Developers
Understanding and Developing Web Services - For DBAs and DevelopersRevelation Technologies
 
Understanding and Developing Web Services: For DBAs and Database Developers
Understanding and Developing Web Services: For DBAs and Database DevelopersUnderstanding and Developing Web Services: For DBAs and Database Developers
Understanding and Developing Web Services: For DBAs and Database DevelopersRevelation Technologies
 
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...FSV308-Culture Shift How to Move a Global Financial Services Organization to ...
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...Amazon Web Services
 
Maximising Data Governance in the Cloud
Maximising Data Governance in the CloudMaximising Data Governance in the Cloud
Maximising Data Governance in the CloudAmazon Web Services
 
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.CA Technologies
 
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?How Do I Plan for Security, Risk and Compliance when Migrating to AWS?
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?Amazon Web Services
 
Developing Web Services from Scratch - For DBAs and Database Developers
Developing Web Services from Scratch - For DBAs and Database DevelopersDeveloping Web Services from Scratch - For DBAs and Database Developers
Developing Web Services from Scratch - For DBAs and Database DevelopersRevelation Technologies
 
From Rogue One to Rebel Alliance: Building Developers into Security Champions
From Rogue One to Rebel Alliance: Building Developers into Security Champions From Rogue One to Rebel Alliance: Building Developers into Security Champions
From Rogue One to Rebel Alliance: Building Developers into Security Champions Digital Transformation EXPO Event Series
 
Crafting Your Oracle License, Contract and Vendor Management Strategy
Crafting Your Oracle License, Contract and Vendor Management StrategyCrafting Your Oracle License, Contract and Vendor Management Strategy
Crafting Your Oracle License, Contract and Vendor Management StrategyFlexera
 
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...CA Technologies
 
Интуитивная сеть как платформа для надежного бизнеса
Интуитивная сеть как платформа для надежного бизнесаИнтуитивная сеть как платформа для надежного бизнеса
Интуитивная сеть как платформа для надежного бизнесаCisco Russia
 
Digital Velocity London 2017: All About The Data
Digital Velocity London 2017: All About The DataDigital Velocity London 2017: All About The Data
Digital Velocity London 2017: All About The DataTealium
 
What Every Client Should Do on Their Oracle SOA Projects
What Every Client Should Do on Their Oracle SOA ProjectsWhat Every Client Should Do on Their Oracle SOA Projects
What Every Client Should Do on Their Oracle SOA ProjectsRevelation Technologies
 
Adding the Sec to Your DevOps Pipelines
Adding the Sec to Your DevOps PipelinesAdding the Sec to Your DevOps Pipelines
Adding the Sec to Your DevOps PipelinesAmazon Web Services
 
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...Amazon Web Services
 
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...DevSecCon
 
Why Your Customers Care About Compliance and You Should Too
Why Your Customers Care About Compliance and You Should TooWhy Your Customers Care About Compliance and You Should Too
Why Your Customers Care About Compliance and You Should TooAmazon Web Services
 

Similar to Getting Started with Security for your Oracle SOA Suite Integrations (20)

graymatter-pentaho-consulting-services-.pdf
graymatter-pentaho-consulting-services-.pdfgraymatter-pentaho-consulting-services-.pdf
graymatter-pentaho-consulting-services-.pdf
 
Understanding and Developing Web Services - For DBAs and Developers
Understanding and Developing Web Services - For DBAs and DevelopersUnderstanding and Developing Web Services - For DBAs and Developers
Understanding and Developing Web Services - For DBAs and Developers
 
Understanding and Developing Web Services: For DBAs and Database Developers
Understanding and Developing Web Services: For DBAs and Database DevelopersUnderstanding and Developing Web Services: For DBAs and Database Developers
Understanding and Developing Web Services: For DBAs and Database Developers
 
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...FSV308-Culture Shift How to Move a Global Financial Services Organization to ...
FSV308-Culture Shift How to Move a Global Financial Services Organization to ...
 
Maximising Data Governance in the Cloud
Maximising Data Governance in the CloudMaximising Data Governance in the Cloud
Maximising Data Governance in the Cloud
 
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.
Case Study: Continuous Delivery in a Tech Debt Laden World by Talk Talk.
 
What is the Oracle Cloud?
What is the Oracle Cloud?What is the Oracle Cloud?
What is the Oracle Cloud?
 
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?How Do I Plan for Security, Risk and Compliance when Migrating to AWS?
How Do I Plan for Security, Risk and Compliance when Migrating to AWS?
 
Developing Web Services from Scratch - For DBAs and Database Developers
Developing Web Services from Scratch - For DBAs and Database DevelopersDeveloping Web Services from Scratch - For DBAs and Database Developers
Developing Web Services from Scratch - For DBAs and Database Developers
 
From Rogue One to Rebel Alliance: Building Developers into Security Champions
From Rogue One to Rebel Alliance: Building Developers into Security Champions From Rogue One to Rebel Alliance: Building Developers into Security Champions
From Rogue One to Rebel Alliance: Building Developers into Security Champions
 
Crafting Your Oracle License, Contract and Vendor Management Strategy
Crafting Your Oracle License, Contract and Vendor Management StrategyCrafting Your Oracle License, Contract and Vendor Management Strategy
Crafting Your Oracle License, Contract and Vendor Management Strategy
 
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...
Securing Your Enterprise Continuous Delivery Pipelines with CA Automation Sol...
 
An Unbiased Look: Oracle SOA Suite 12c
An Unbiased Look: Oracle SOA Suite 12cAn Unbiased Look: Oracle SOA Suite 12c
An Unbiased Look: Oracle SOA Suite 12c
 
Интуитивная сеть как платформа для надежного бизнеса
Интуитивная сеть как платформа для надежного бизнесаИнтуитивная сеть как платформа для надежного бизнеса
Интуитивная сеть как платформа для надежного бизнеса
 
Digital Velocity London 2017: All About The Data
Digital Velocity London 2017: All About The DataDigital Velocity London 2017: All About The Data
Digital Velocity London 2017: All About The Data
 
What Every Client Should Do on Their Oracle SOA Projects
What Every Client Should Do on Their Oracle SOA ProjectsWhat Every Client Should Do on Their Oracle SOA Projects
What Every Client Should Do on Their Oracle SOA Projects
 
Adding the Sec to Your DevOps Pipelines
Adding the Sec to Your DevOps PipelinesAdding the Sec to Your DevOps Pipelines
Adding the Sec to Your DevOps Pipelines
 
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...
FINRA's Managed Data Lake: Next-Gen Analytics in the Cloud - ENT328 - re:Inve...
 
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...
DevSecCon Singapore 2018 - Maginot Line – 6 Common AppSec Anti-Patterns Preve...
 
Why Your Customers Care About Compliance and You Should Too
Why Your Customers Care About Compliance and You Should TooWhy Your Customers Care About Compliance and You Should Too
Why Your Customers Care About Compliance and You Should Too
 

More from Revelation Technologies

Automating Cloud Operations: Everything You Wanted to Know about cURL and REST
Automating Cloud Operations: Everything You Wanted to Know about cURL and RESTAutomating Cloud Operations: Everything You Wanted to Know about cURL and REST
Automating Cloud Operations: Everything You Wanted to Know about cURL and RESTRevelation Technologies
 
Getting Started with API Management – Why It's Needed On-prem and in the Cloud
Getting Started with API Management – Why It's Needed On-prem and in the CloudGetting Started with API Management – Why It's Needed On-prem and in the Cloud
Getting Started with API Management – Why It's Needed On-prem and in the CloudRevelation Technologies
 
Automating Cloud Operations - Everything you wanted to know about cURL and RE...
Automating Cloud Operations - Everything you wanted to know about cURL and RE...Automating Cloud Operations - Everything you wanted to know about cURL and RE...
Automating Cloud Operations - Everything you wanted to know about cURL and RE...Revelation Technologies
 
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices Framework
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices FrameworkIntroducing the Oracle Cloud Infrastructure (OCI) Best Practices Framework
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices FrameworkRevelation Technologies
 
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Revelation Technologies
 
PTK Issue 72: Delivering a Platform on Demand
PTK Issue 72: Delivering a Platform on DemandPTK Issue 72: Delivering a Platform on Demand
PTK Issue 72: Delivering a Platform on DemandRevelation Technologies
 
PTK Issue 71: The Compute Cloud Performance Showdown
PTK Issue 71: The Compute Cloud Performance ShowdownPTK Issue 71: The Compute Cloud Performance Showdown
PTK Issue 71: The Compute Cloud Performance ShowdownRevelation Technologies
 
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Revelation Technologies
 
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Revelation Technologies
 
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Revelation Technologies
 
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to Know
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to KnowThe Microsoft Azure and Oracle Cloud Interconnect Everything You Need to Know
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to KnowRevelation Technologies
 
First Impressions: Docker in the Cloud with Oracle Container Cloud Service
First Impressions: Docker in the Cloud with Oracle Container Cloud ServiceFirst Impressions: Docker in the Cloud with Oracle Container Cloud Service
First Impressions: Docker in the Cloud with Oracle Container Cloud ServiceRevelation Technologies
 
Building Reusable Development Environments with Docker
Building Reusable Development Environments with DockerBuilding Reusable Development Environments with Docker
Building Reusable Development Environments with DockerRevelation Technologies
 
Oracle Java & Developer Cloud Service: What It Does & Doesn't Do
Oracle Java & Developer Cloud Service: What It Does & Doesn't DoOracle Java & Developer Cloud Service: What It Does & Doesn't Do
Oracle Java & Developer Cloud Service: What It Does & Doesn't DoRevelation Technologies
 
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On Review
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On ReviewOracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On Review
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On ReviewRevelation Technologies
 

More from Revelation Technologies (18)

Operating System Security in the Cloud
Operating System Security in the CloudOperating System Security in the Cloud
Operating System Security in the Cloud
 
Getting Started with Terraform
Getting Started with TerraformGetting Started with Terraform
Getting Started with Terraform
 
Getting Started with API Management
Getting Started with API ManagementGetting Started with API Management
Getting Started with API Management
 
Automating Cloud Operations: Everything You Wanted to Know about cURL and REST
Automating Cloud Operations: Everything You Wanted to Know about cURL and RESTAutomating Cloud Operations: Everything You Wanted to Know about cURL and REST
Automating Cloud Operations: Everything You Wanted to Know about cURL and REST
 
Getting Started with API Management – Why It's Needed On-prem and in the Cloud
Getting Started with API Management – Why It's Needed On-prem and in the CloudGetting Started with API Management – Why It's Needed On-prem and in the Cloud
Getting Started with API Management – Why It's Needed On-prem and in the Cloud
 
Automating Cloud Operations - Everything you wanted to know about cURL and RE...
Automating Cloud Operations - Everything you wanted to know about cURL and RE...Automating Cloud Operations - Everything you wanted to know about cURL and RE...
Automating Cloud Operations - Everything you wanted to know about cURL and RE...
 
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices Framework
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices FrameworkIntroducing the Oracle Cloud Infrastructure (OCI) Best Practices Framework
Introducing the Oracle Cloud Infrastructure (OCI) Best Practices Framework
 
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
 
PTK Issue 72: Delivering a Platform on Demand
PTK Issue 72: Delivering a Platform on DemandPTK Issue 72: Delivering a Platform on Demand
PTK Issue 72: Delivering a Platform on Demand
 
PTK Issue 71: The Compute Cloud Performance Showdown
PTK Issue 71: The Compute Cloud Performance ShowdownPTK Issue 71: The Compute Cloud Performance Showdown
PTK Issue 71: The Compute Cloud Performance Showdown
 
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
Everything You Need to Know About the Microsoft Azure and Oracle Cloud Interc...
 
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
 
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
Compute Cloud Performance Showdown: 18 Months Later (OCI, AWS, IBM Cloud, GCP...
 
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to Know
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to KnowThe Microsoft Azure and Oracle Cloud Interconnect Everything You Need to Know
The Microsoft Azure and Oracle Cloud Interconnect Everything You Need to Know
 
First Impressions: Docker in the Cloud with Oracle Container Cloud Service
First Impressions: Docker in the Cloud with Oracle Container Cloud ServiceFirst Impressions: Docker in the Cloud with Oracle Container Cloud Service
First Impressions: Docker in the Cloud with Oracle Container Cloud Service
 
Building Reusable Development Environments with Docker
Building Reusable Development Environments with DockerBuilding Reusable Development Environments with Docker
Building Reusable Development Environments with Docker
 
Oracle Java & Developer Cloud Service: What It Does & Doesn't Do
Oracle Java & Developer Cloud Service: What It Does & Doesn't DoOracle Java & Developer Cloud Service: What It Does & Doesn't Do
Oracle Java & Developer Cloud Service: What It Does & Doesn't Do
 
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On Review
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On ReviewOracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On Review
Oracle Compute Cloud Service vs. Amazon Web Services EC2 : A Hands-On Review
 

Recently uploaded

SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...CzechDreamin
 
Agentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdfAgentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdfChristopherTHyatt
 
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...CzechDreamin
 
ECS 2024 Teams Premium - Pretty Secure
ECS 2024   Teams Premium - Pretty SecureECS 2024   Teams Premium - Pretty Secure
ECS 2024 Teams Premium - Pretty SecureFemke de Vroome
 
Structuring Teams and Portfolios for Success
Structuring Teams and Portfolios for SuccessStructuring Teams and Portfolios for Success
Structuring Teams and Portfolios for SuccessUXDXConf
 
"Impact of front-end architecture on development cost", Viktor Turskyi
"Impact of front-end architecture on development cost", Viktor Turskyi"Impact of front-end architecture on development cost", Viktor Turskyi
"Impact of front-end architecture on development cost", Viktor TurskyiFwdays
 
AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101vincent683379
 
Connecting the Dots in Product Design at KAYAK
Connecting the Dots in Product Design at KAYAKConnecting the Dots in Product Design at KAYAK
Connecting the Dots in Product Design at KAYAKUXDXConf
 
What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024Stephanie Beckett
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
 
IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoTAnalytics
 
PLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. StartupsPLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. StartupsStefano
 
Strategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering TeamsStrategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering TeamsUXDXConf
 
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo DiehlFuture Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo DiehlPeter Udo Diehl
 
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀DianaGray10
 
Intelligent Gimbal FINAL PAPER Engineering.pdf
Intelligent Gimbal FINAL PAPER Engineering.pdfIntelligent Gimbal FINAL PAPER Engineering.pdf
Intelligent Gimbal FINAL PAPER Engineering.pdfAnthony Lucente
 
Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi IbrahimzadeFree and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi IbrahimzadeCzechDreamin
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsPaul Groth
 
Optimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through ObservabilityOptimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through ObservabilityScyllaDB
 
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone KomSalesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone KomCzechDreamin
 

Recently uploaded (20)

SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
SOQL 201 for Admins & Developers: Slice & Dice Your Org’s Data With Aggregate...
 
Agentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdfAgentic RAG What it is its types applications and implementation.pdf
Agentic RAG What it is its types applications and implementation.pdf
 
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
Behind the Scenes From the Manager's Chair: Decoding the Secrets of Successfu...
 
ECS 2024 Teams Premium - Pretty Secure
ECS 2024   Teams Premium - Pretty SecureECS 2024   Teams Premium - Pretty Secure
ECS 2024 Teams Premium - Pretty Secure
 
Structuring Teams and Portfolios for Success
Structuring Teams and Portfolios for SuccessStructuring Teams and Portfolios for Success
Structuring Teams and Portfolios for Success
 
"Impact of front-end architecture on development cost", Viktor Turskyi
"Impact of front-end architecture on development cost", Viktor Turskyi"Impact of front-end architecture on development cost", Viktor Turskyi
"Impact of front-end architecture on development cost", Viktor Turskyi
 
AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101
 
Connecting the Dots in Product Design at KAYAK
Connecting the Dots in Product Design at KAYAKConnecting the Dots in Product Design at KAYAK
Connecting the Dots in Product Design at KAYAK
 
What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
 
IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024
 
PLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. StartupsPLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. Startups
 
Strategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering TeamsStrategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering Teams
 
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo DiehlFuture Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
 
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
 
Intelligent Gimbal FINAL PAPER Engineering.pdf
Intelligent Gimbal FINAL PAPER Engineering.pdfIntelligent Gimbal FINAL PAPER Engineering.pdf
Intelligent Gimbal FINAL PAPER Engineering.pdf
 
Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi IbrahimzadeFree and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
Optimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through ObservabilityOptimizing NoSQL Performance Through Observability
Optimizing NoSQL Performance Through Observability
 
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone KomSalesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
 

Getting Started with Security for your Oracle SOA Suite Integrations

  • 1. Raastech, Inc. 2201 Cooperative Way, Suite 600 Herndon, VA 20171 +1-703-884-2223 info@raastech.com Getting Started w/ Security for your Oracle SOA Suite Integrations From Transport Protection to API Management Wednesday, May 10, 2017 Session 6 11:30 am - 12:20pm Amphitheater
  • 2. © Raastech, Inc. 2017 | All rights reserved. Slide 2 of 78@Raastech Agenda 1. Introduction 2. Security Essentials 3. Oracle Fusion Middleware Security Platform 4. Oracle Web Services Platform “Practical” Implementation 5. Oracle Web Service Manager 6. Custom Policies 7. Oracle API Gateway
  • 3. © Raastech, Inc. 2017 | All rights reserved. Slide 3 of 78@Raastech
  • 4. © Raastech, Inc. 2017 | All rights reserved. Slide 4 of 78@Raastech About Me ▪ Michael Mikhailidi ▪ 20+ years Oracle experience ▪ Extensive Oracle Fusion Middleware experience ▪ Oracle SOA Certified ▪ Past employment with Oracle, Rimini Street
  • 5. © Raastech, Inc. 2017 | All rights reserved. Slide 5 of 78@Raastech What’s it all about? ▪ Information & communication protection is important as never before ▪ They tell you that all the time ▪ Security standards are old and will stay there ▪ Learning curve is steep ▪ Old formats, lack of compatibility, layers of fossils ▪ Implementation issues ▪ On a residual basis ▪ Lack of resources ▪ Errors, backdoors, support
  • 6. © Raastech, Inc. 2017 | All rights reserved. Slide 6 of 78@Raastech
  • 7. © Raastech, Inc. 2017 | All rights reserved. Slide 7 of 78@Raastech Key Security Terms ▪ Public Key Infrastructure ▪ Asymmetric key exchange ▪ Published by Whitfield Diffie and Martin Hellman, in 1976 ▪ Ron Rivest, Adi Shamir, and Leonard Adleman identified the same relationship in 1978 (aka RSA Corp) ▪ Standard X.509 ▪ X.509 was initially issued on July 3, 1988 ▪ Subset of X.500 standard ▪ Base for all the modern web of trust and certificates ▪ Secured Socket Layer/Transport Level Security ▪ Invented by Netscape in1994 ▪ TLS was introduced in 1999 ▪ SSL version 3 is no longer exists in public communications, TLS has version 1.2, 1.3 is coming
  • 8. © Raastech, Inc. 2017 | All rights reserved. Slide 8 of 78@Raastech Alice’s key for Bob Certified by Rabbit Rabbit’s public key Alice & Bob Secret Correspondence
  • 9. © Raastech, Inc. 2017 | All rights reserved. Slide 9 of 78@Raastech Transport Level Security ▪ Transport level security in the most cases ▪ No certificate (Public key) required for client ▪ Client creates temporary private key for the session ▪ Sends the key back to the server signed with Server’s public key ▪ You still need PKI to validate server credentials ▪ Protects all the data exchange between server and the client ▪ Requires configuration not development ▪ That’s why it’s the most popular solution
  • 10. © Raastech, Inc. 2017 | All rights reserved. Slide 10 of 78@Raastech Service and Message Protection ▪ Service Protection ▪ User Authentication ▪ User Authorization ▪ Session Validation ▪ Message Protection ▪ Message encryption ▪ Message nonrepudiation (Signing) ▪ Guarantied Delivery (Reliability) ▪ Management Tasks ▪ Logging ▪ Audit ▪ Transformation
  • 11. © Raastech, Inc. 2017 | All rights reserved. Slide 11 of 78@Raastech
  • 12. © Raastech, Inc. 2017 | All rights reserved. Slide 12 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Authentication ▪ Single Sign-On ▪ Authorization ▪ Audit ▪ Credential Store Framework ▪ Identity Governance Framework ▪ Cryptography ▪ Management ▪ Security Providers ▪ Security Stores
  • 13. © Raastech, Inc. 2017 | All rights reserved. Slide 13 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Users & Groups ▪ Credentials ▪ Security Providers ▪ Keystores ▪ Application Roles/Policies
  • 14. © Raastech, Inc. 2017 | All rights reserved. Slide 14 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Users & Groups ▪ Credentials ▪ Security Providers ▪ Keystores ▪ Application Roles/Policies
  • 15. © Raastech, Inc. 2017 | All rights reserved. Slide 15 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Users & Groups ▪ Credentials ▪ Security Providers ▪ Keystores ▪ Application Roles/Policies
  • 16. © Raastech, Inc. 2017 | All rights reserved. Slide 16 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Users & Groups ▪ Credentials ▪ Security Providers ▪ Keystores ▪ Application Roles/Policies
  • 17. © Raastech, Inc. 2017 | All rights reserved. Slide 17 of 78@Raastech Oracle Platform Security Service (OPSS) ▪ Users & Groups ▪ Credentials ▪ Security Providers ▪ Keystores ▪ Application Roles/Policies
  • 18. © Raastech, Inc. 2017 | All rights reserved. Slide 18 of 78@Raastech How OWSM Works ▪ Web Service ▪ Published by web application ▪ WebLogic server runs application and WSM agent – Separate application deployments for 3rd party servers ▪ WSM Agent enforces global & local policies – Endpoints – SOA Components – Clients ▪ Web Service Client ▪ Accesses service endpoint ▪ Should follow policies to complete call ▪ WSM Policy Manager ▪ Manage policies ▪ Release policy information to agents ▪ Administrative GUI through Fusion Middleware EM Control ▪ Web Service Clients ▪ WSM common and client policies ▪ Applies policies to the service references
  • 19. © Raastech, Inc. 2017 | All rights reserved. Slide 19 of 78@Raastech How OWSM Works 1. Client sends a request message to a web service. 2. Policy interceptors intercept and execute the policies attached to the client. 3. Request message is then sent to the web service. 4. Policy interceptors then execute any service policies attached to the web service. 5. Web service executes the request message and returns a response message. 6. Response message is intercepted by the policy interceptors which execute the service policies attached to the web service. 7. Response message is then sent to the client. 8. Policy interceptors then execute any client policies attached to the client. 9. Response message is passed to the client.
  • 20. © Raastech, Inc. 2017 | All rights reserved. Slide 20 of 78@Raastech
  • 21. © Raastech, Inc. 2017 | All rights reserved. Slide 21 of 78@Raastech Yet Another “Hello World” Example
  • 22. © Raastech, Inc. 2017 | All rights reserved. Slide 22 of 78@Raastech HelloWorld WSDL
  • 23. © Raastech, Inc. 2017 | All rights reserved. Slide 23 of 78@Raastech Let’s say “Hello”
  • 24. © Raastech, Inc. 2017 | All rights reserved. Slide 24 of 78@Raastech Pit Stop: How to find the right policy? ▪ Large number policies are predefined and ready to use ▪ 55 security policies are predefined in OWSM ▪ Policy templates, to tailor policies that fits your requirements ▪ Oracle recommends to follow naming convention ▪ Helps you understand what policy does by name ▪ Folder-like organization keeps policies organized oracle/wss_saml_or_username_token_over_ssl_service_policy Folder Standard Policy OR policy Policy Enforcement point Transport Type
  • 25. © Raastech, Inc. 2017 | All rights reserved. Slide 25 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 26. © Raastech, Inc. 2017 | All rights reserved. Slide 26 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 27. © Raastech, Inc. 2017 | All rights reserved. Slide 27 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 28. © Raastech, Inc. 2017 | All rights reserved. Slide 28 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 29. © Raastech, Inc. 2017 | All rights reserved. Slide 29 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 30. © Raastech, Inc. 2017 | All rights reserved. Slide 30 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 31. © Raastech, Inc. 2017 | All rights reserved. Slide 31 of 78@Raastech Apply OWSM Policy to the Service Endpoint
  • 32. © Raastech, Inc. 2017 | All rights reserved. Slide 32 of 78@Raastech HelloWorld WSDL with Policy
  • 33. © Raastech, Inc. 2017 | All rights reserved. Slide 33 of 78@Raastech How to say “Hello” now
  • 34. © Raastech, Inc. 2017 | All rights reserved. Slide 34 of 78@Raastech How to say “Hello” now
  • 35. © Raastech, Inc. 2017 | All rights reserved. Slide 35 of 78@Raastech How to say “Hello” now
  • 36. © Raastech, Inc. 2017 | All rights reserved. Slide 36 of 78@Raastech Apply OWSM Policy at Design Time
  • 37. © Raastech, Inc. 2017 | All rights reserved. Slide 37 of 78@Raastech Apply OWSM Policy at Design Time
  • 38. © Raastech, Inc. 2017 | All rights reserved. Slide 38 of 78@Raastech Apply OWSM Policy at Design Time
  • 39. © Raastech, Inc. 2017 | All rights reserved. Slide 39 of 78@Raastech Apply OWSM Policy at Design Time
  • 40. © Raastech, Inc. 2017 | All rights reserved. Slide 40 of 78@Raastech Apply OWSM Policy at Design Time
  • 41. © Raastech, Inc. 2017 | All rights reserved. Slide 41 of 78@Raastech Apply OWSM Policy at Design Time
  • 42. © Raastech, Inc. 2017 | All rights reserved. Slide 42 of 78@Raastech
  • 43. © Raastech, Inc. 2017 | All rights reserved. Slide 43 of 78@Raastech ▪ HelloWorldService reference ▪ Don’t forget to use protected URL ▪ BPEL process to call service ▪ Mediator is too simple ▪ Service Reference to expose process Not So Simple Composite
  • 44. © Raastech, Inc. 2017 | All rights reserved. Slide 44 of 78@Raastech Not So Simple Composite ▪ Now we select service reference – apply the same policy – with client flavor
  • 45. © Raastech, Inc. 2017 | All rights reserved. Slide 45 of 78@Raastech Not So Simple Composite ▪ Client side require bit more configuration ▪ Click on pencil icon ▪ Override cf-key value with credentials alias ▪ Let’s say wlsadmin ▪ And save policy
  • 46. © Raastech, Inc. 2017 | All rights reserved. Slide 46 of 78@Raastech Not So Simple Composite ▪ Lock icon on the reference means: ▪ Policy has ben attached ▪ One more step before deployment
  • 47. © Raastech, Inc. 2017 | All rights reserved. Slide 47 of 78@Raastech Not So Simple Composite ▪ Time to recall OPSS features ▪ Navigate to Weblogic Domain > Security > Credentials ▪ Create new key ▪ With еру appropriate credentials ▪ Save the key ▪ Now we are ready for deployment ▪ And if you don’t have oracle.wsm.security map: Don’t be shy – create it!
  • 48. © Raastech, Inc. 2017 | All rights reserved. Slide 48 of 78@Raastech Not So Simple Composite ▪ Time to recall OPSS features ▪ Navigate to Weblogic Domain > Security > Credentials ▪ Create new key ▪ With еру appropriate credentials ▪ Save the key ▪ Now we are ready for deployment ▪ And if you don’t have oracle.wsm.security map: Don’t be shy – create it!
  • 49. © Raastech, Inc. 2017 | All rights reserved. Slide 49 of 78@Raastech Let’s say hello again ▪ OWSM client call: ▪ No SSL ▪ No WS-Security
  • 50. © Raastech, Inc. 2017 | All rights reserved. Slide 50 of 78@Raastech Let’s say hello again ▪ However service gets all necessary headers from the client policy
  • 51. © Raastech, Inc. 2017 | All rights reserved. Slide 51 of 78@Raastech
  • 52. © Raastech, Inc. 2017 | All rights reserved. Slide 52 of 78@Raastech What if you need the policy that differs? ▪ You found a policy, it does what you need, but not exactly… ▪ Company security rules mandate: “No clear text passwords allowed”
  • 53. © Raastech, Inc. 2017 | All rights reserved. Slide 53 of 78@Raastech What if you need the policy that differs? ▪ The answer: Custom policies
  • 54. © Raastech, Inc. 2017 | All rights reserved. Slide 54 of 78@Raastech Customize Predefined Policy
  • 55. © Raastech, Inc. 2017 | All rights reserved. Slide 55 of 78@Raastech Customize Predefined Policy
  • 56. © Raastech, Inc. 2017 | All rights reserved. Slide 56 of 78@Raastech Customize Predefined Policy
  • 57. © Raastech, Inc. 2017 | All rights reserved. Slide 57 of 78@Raastech Customize Predefined Policy
  • 58. © Raastech, Inc. 2017 | All rights reserved. Slide 58 of 78@Raastech Customize Predefined Policy
  • 59. © Raastech, Inc. 2017 | All rights reserved. Slide 59 of 78@Raastech Customize Predefined Policy
  • 60. © Raastech, Inc. 2017 | All rights reserved. Slide 60 of 78@Raastech Customize Predefined Policy
  • 61. © Raastech, Inc. 2017 | All rights reserved. Slide 61 of 78@Raastech Customize Predefined Policy
  • 62. © Raastech, Inc. 2017 | All rights reserved. Slide 62 of 78@Raastech Homegrown OWSM Policies ▪ 3 components: ▪ Custom assertion executor Java code, which implements your custom logic with OWSM Java API ▪ Custom policy file XML document which defines bindings, parameters, and all that to make assertion usable ▪ policy-config.xml XML document you need to attach new assertion to the OWSM repository
  • 63. © Raastech, Inc. 2017 | All rights reserved. Slide 63 of 78@Raastech How to manage hundreds of services? ▪ You have lot of services and don’t want to enforce all the policies manually ▪ All company services should be compliant to set of policies ▪ But not all of them The answer: Globally attached policies
  • 64. © Raastech, Inc. 2017 | All rights reserved. Slide 64 of 78@Raastech Policy Sets ▪ Contains one or more policies ▪ Defines subject to apply: ˗ SOA Component ˗ SOA Reference ˗ SOA Service ˗ Web Service Endpoint ˗ Web Service Client ˗ Web Service Connection ˗ Asynchronous Callback Client ▪ Describes subject scope ▪ Policies in set have selection filters
  • 65. © Raastech, Inc. 2017 | All rights reserved. Slide 65 of 78@Raastech Apply Global Policies to all Services ▪ You can use WLST to create and manage policy sets
  • 66. © Raastech, Inc. 2017 | All rights reserved. Slide 66 of 78@Raastech Apply Global Policies to all Services ▪ …or do the same from Fusion Middleware Control
  • 67. © Raastech, Inc. 2017 | All rights reserved. Slide 67 of 78@Raastech
  • 68. © Raastech, Inc. 2017 | All rights reserved. Slide 68 of 78@Raastech OWSM on Steroids ▪ Secure enough to protect all your services ▪ Strong enough to live in DMZ ▪ Smart enough to take a share in routing and transformation ▪ Data reduction ▪ Protocol exchange ▪ API transformation ▪ Open enough to click into existing management framework ▪ Integration with Oracle Enterprise Manager
  • 69. © Raastech, Inc. 2017 | All rights reserved. Slide 69 of 78@Raastech API Gateway Architecture & Components ▪ Key components and tools ▪ API Gateway Manager ▪ Policy Studio ▪ API Gateway Analytics ▪ API Gateway Explorer
  • 70. © Raastech, Inc. 2017 | All rights reserved. Slide 70 of 78@Raastech API Gateway Architecture & Components
  • 71. © Raastech, Inc. 2017 | All rights reserved. Slide 71 of 78@Raastech API Gateway Architecture & Components ▪ API Gateway Manager ▪ Centralized web-based dashboard ▪ Control and manage API Gateways and groups in a domain ▪ Displays aggregated monitoring data from multiple API Gateway instances ▪ Including real-time statistics, traffic log, log files, and alerts ▪ Manages, monitors, and troubleshoots the API Services that are virtualized on the API Gateway
  • 72. © Raastech, Inc. 2017 | All rights reserved. Slide 72 of 78@Raastech API Gateway Architecture & Components
  • 73. © Raastech, Inc. 2017 | All rights reserved. Slide 73 of 78@Raastech API Gateway Architecture & Components ▪ Policy Studio ▪ Policy development and configuration for API and service protection ▪ Develops API Gateway policies and solution packs ▪ Customizes and extends the API Gateway using scripting ▪ Creates Java classes and/or custom filters using the API Gateway filter SDK ▪ Typically on a separate machine from the API Gateway
  • 74. © Raastech, Inc. 2017 | All rights reserved. Slide 74 of 78@Raastech API Gateway Architecture & Components
  • 75. © Raastech, Inc. 2017 | All rights reserved. Slide 75 of 78@Raastech API Gateway Architecture & Components ▪ Oracle API Gateway Analytics ▪ Generate reports and charts based on usage metrics ▪ Database integration ▪ Oracle Database ▪ MySQL Server ▪ Microsoft SQL Server ▪ Real-time and historical metrics.
  • 76. © Raastech, Inc. 2017 | All rights reserved. Slide 76 of 78@Raastech API Gateway Architecture & Components
  • 77. © Raastech, Inc. 2017 | All rights reserved. Slide 77 of 78@Raastech References ▪ Basics and History of PKI https://blogs.technet.microsoft.com/option_explicit/2012/03/10/basics-and-history-of-pki/ ▪ Secure Socket Layer and Transport Socket Layer, by Jinwoo Hwang http://www.ibm.com/developerworks/library/ws-ssl-security/ ▪ Sample Formats https://en.wikipedia.org/wiki/X.509 https://en.wikipedia.org/wiki/LDAP_Data_Interchange_Format ▪ WS-Security Specifications https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss ▪ OPSS 11g Technical Whitepaper http://www.oracle.com/technetwork/middleware/id-mgmt/opss-tech-wp-131775.pdf ▪ Understanding the OWSM Policy Framework https://docs.oracle.com/middleware/1213/owsm/concepts/owsm-policy-framework.htm ▪ OWSM Role Authorization http://www.oracle.com//technetwork/middleware/webservices-manager/soa-component-role-authz-1555950.pdf ▪ API Gateway Concepts https://docs.oracle.com/cd/E65459_01/docs.1112/e65451/Default.htm#ConceptsGuideTopics/3_overview.htm ▪ Aaron Dolan. our API’s First Line of Defense: Oracle API Gateway http://www.avioconsulting.com/blog/your-apis-first-line-defense-oracle-api-gateway
  • 78. © Raastech, Inc. 2017 | All rights reserved. Slide 78 of 78@Raastech Q&A