Publishing Web Services Policies

•

0 likes•386 views

This document discusses the need for BT, a large telecommunications company, to publish web service policies for integration and revenue purposes. It notes that while BT invests heavily in web services, there is currently no interoperable mechanism for publishing and enforcing policies. The document analyzes potential candidates like WS-Policy but finds they are not suitable for BT's needs. It concludes that W3C should lead the industry to develop a solution so BT can publish and enforce policies across its many web services.

Technology

Publishing Web Service Policies

W3C Constraints and Capabilities
Workshop, October 2004

BT Web Services

• Web services for integration
– 1000s ‘running the business’

• Web services for revenue
– key part of 21CN

Interoperability!

Policies agent
interactions

Status
Signing
Encryption shortcut
negotiations
Authentication
Conformance Claims
Availability
Life Cycle
Loading
Privacy
service
QOS selection
Price

Policy Framework

Combinations
Composition

Vocabularies
Privacy Security QOS …

Uniform
Assertions MetaData

Policy Environment

• Evolution

• Negotiation

• Commitment

Workshop Use Case

• ‘mustUnderstand’ mechanism

• identification of message parts

• combinations:
– and, or, both, precedence, quantification

• assertions:
– description: interface,binding, endpoint
– inside message contents

Obvious Candidates

• WS-Policy

• Features and Properties

• Semantic Web activity

• Others? none currently
suitable for BT!

Conclusions

• BT investing heavily in Web services

• BT needs to publish policies

• No interoperable mechanism exists

• W3C can lead the industry towards a solution

Thank You!

Paul Downey, BT Exact
October 2004

My presentation on behalf of the Cloud Industry Forum at Cloud Expo Europe 2014 - setting the scene on why service providers need CIF certification, and how it helps buyers pick and choose between a good provider and a bad provider. The intro explains that we are at the most exciting but disruptive time in IT for over 50 years with the shift to cloud, social and mobile happening simultaneously - we've never had 3 shifts at once before!

SOA - Enabling Interoperability And Business Agility March 2009

Mike Wons

Cloud Lock-in vs. Cloud Interoperability - Indicthreads cloud computing conf...

IndicThreads

Session presented at the 2nd IndicThreads.com Conference on Cloud Computing held in Pune, India on 3-4 June 2011. http://CloudComputing.IndicThreads.com Abstract:As the cloud adoption increases, there is a growing concern about the lock-in of customers into the various cloud platforms. This session will discuss various major cloud platforms, the type of lock-in the customer will face in each of these platforms and what each customer can do to minimize their lock-in. Key takeaways for audience are: Understand what is cloud lock-in Types of cloud vendor lock-ins What is cloud interoperability Major initiatives around cloud interoperability standards Goals, differences and players/proponents of these major standards Steps to minimize cloud lock-in for your customers Speaker: Ashwin Waknis is a Sr. IT professional with 15 years in the industry. Ashwin is currently head of the Cloud Professional Services Business at Persistent Systems. Before that Ashwin was a Sr. Product Manager at Cisco Systems where he lead major initiatives around Knowledge Management, Enterprise Portal, Web 2.0/Social softwares and Enterprise Search. For the last 2 years, Ashwin has been involved in Cloud Computing initiatives first at Cisco and then at Persistent Systems.Ashwin has spoken at many customer workshops and events organized for educational institutes.

Semantic Web Process Lifecycle: Role of Semantics in Annotation, Discovery, C...

Amit Sheth

“Semantic Web Process Lifecycle: Role of Semantics in Annotation, Discovery, Composition and Orchestration,” Keynote/Invited Talk, WWW 2003 Workshop on E-Services and the Semantic Web, Budapest, Hungary, May 20, 2003. Here is the paper based on this talk: Kaarthik Sivashanmugam, Kunal Verma,Amit Sheth, and John Miller, 'Adding Semantics to Web Services Standards,'International Conference on Web Services 2003 (ICWS'03), Las Vegas, NV, June 23-26, 2003. http://knoesis.org/library/resource.php?id=00174

Code objects overview sep 2012steveramsthel

Intel Cloud Summit ODCA - NAB Customer presentationIntelAPAC

Making of a Successful Cloud Business

ACMBangalore

A Business Interoperability Framework for Government by Christine Stephenson

Craig Martin

Despite the focus on eGovernment and the delivery of seamless services to citizens, Government continues to be challenged to deliver business interoperability goals. Interviews with Government Enterprise Architecture stakeholder and a search of the literature suggests why government has failed to achieve seamless service delivery. It appears that interoperability in government is largely a combination of bottom-up, standards or application design based approaches. These result in Information Systems solutions that achieve interoperability within the application and technology domains, but not the business domain. Consequently, the public sector operates as a fractured collection of departments, with much complexity and bureaucracy reducing the effectiveness and efficiency of service delivery. The Business Interoperability Framework (BIF) draws from three disciplines of management practice and applies industry standards. These practice areas are; Enterprise Architecture; Service Oriented Architecture; and Business Process Management. The frameworks, standards/specifications that will be referenced are ISO/IEC 10746 (RM-ODP), TOGAF®, OASIS, UMM, BMM, BPMN and ISO 15000. Key takeaways: -- How to achieve top-down business interoperability outcomes -- An architected framework for business success -- Methods and tools that can be used to deliver business/IT alignment

Evaluating Contract Compatibility for Service Composition in The SeCO2 Framework

Hong-Linh Truong

2007: Achieving Interoperability In Systems Architecture - SOA Vision And Rea...

rchopra13

Web services2014Lee Schlenker

Building a Hybrid Platform as a ServiceWSO2

QOS OF WEB SERVICE: SURVEY ON PERFORMANCE AND SCALABILITY

csandit

In today’s scenario, most of the organizations provide the services through the web. This makes the web service an important research area. In addition, early design and building web services, it is necessary to concentrate on the quality of web services. Performance is an important quality attributes that to be considered during the designing of web services. The expected performance can be achieved by proper scheduling of resources and scalability of the system. Scalability is a desirable attribute of a process computer system or network. Poor scalability can result in lacking system performance. Hence, in this paper, we have reviewed the literature available for the quality attributes of performance and scalability and identified the issues that affect the quality attributes related to Web Services.

Cloud definitions and market opportunitiesVik Bhambri

ODI Lunchtime Talk, Creating an open register – what it takes and why

Paul Downey

A ‘register’ is an authoritative list of data you can trust. Government keeping and maintaining open registers can help us move beyond relying upon data which is published periodically to operating on data that is trustworthy, standardised and open. Used widely, registers will help the UK to build better services, more cheaply and quickly. In this talk, Paul Downey from the Government Digital Service will share the vision for what open registers can help achieve, and the characteristics an open register needs in order to appear on the new register.gov.uk domain. To demonstrate this, Paul will take a list of government data through the Register Design Authority process. https://theodi.org/lunchtime-lectures/friday-lunchtime-lecture-creating-an-open-register-what-it-takes-and-why

Building systems with integrity

Paul Downey

Similar to Publishing Web Services Policies

Security in Semantic Web Services

Nima Dokoohaki

"Oracle Insight for Investors" Educational Webcast - Oracle Fusion Middlewareinvestorrelation

Layer 7: Building Multi Enterprise SOA

CA API Management

TechEd PreconferenceSimon Guest

White PaperVideoguy

Building trust for cloud customers - the value of cif certification

David Terrar

SOA - Enabling Interoperability And Business Agility March 2009

Mike Wons

Cloud Lock-in vs. Cloud Interoperability - Indicthreads cloud computing conf...

IndicThreads

Semantic Web Process Lifecycle: Role of Semantics in Annotation, Discovery, C...

Amit Sheth

Code objects overview sep 2012steveramsthel

Intel Cloud Summit ODCA - NAB Customer presentationIntelAPAC

Making of a Successful Cloud Business

ACMBangalore

A Business Interoperability Framework for Government by Christine Stephenson

Craig Martin

Evaluating Contract Compatibility for Service Composition in The SeCO2 Framework

Hong-Linh Truong

2007: Achieving Interoperability In Systems Architecture - SOA Vision And Rea...

rchopra13

Web services2014Lee Schlenker

Building a Hybrid Platform as a ServiceWSO2

QOS OF WEB SERVICE: SURVEY ON PERFORMANCE AND SCALABILITY

csandit

Cloud definitions and market opportunitiesVik Bhambri

Similar to Publishing Web Services Policies (20)

Security in Semantic Web Services

"Oracle Insight for Investors" Educational Webcast - Oracle Fusion Middleware

Layer 7: Building Multi Enterprise SOA

TechEd Preconference

White Paper

Building trust for cloud customers - the value of cif certification

SOA - Enabling Interoperability And Business Agility March 2009

Cloud Lock-in vs. Cloud Interoperability - Indicthreads cloud computing conf...

Semantic Web Process Lifecycle: Role of Semantics in Annotation, Discovery, C...

Code objects overview sep 2012

Intel Cloud Summit ODCA - NAB Customer presentation

Making of a Successful Cloud Business

A Business Interoperability Framework for Government by Christine Stephenson

Evaluating Contract Compatibility for Service Composition in The SeCO2 Framework

2007: Achieving Interoperability In Systems Architecture - SOA Vision And Rea...

Web services2014

Building a Hybrid Platform as a Service

QOS OF WEB SERVICE: SURVEY ON PERFORMANCE AND SCALABILITY

Cloud definitions and market opportunities

More from Paul Downey

ODI Lunchtime Talk, Creating an open register – what it takes and why

Paul Downey

Building systems with integrity

Paul Downey

Registers

Paul Downey

Building systems with integrity

Paul Downey

Standards are Great, but Standardisation is a Really Bad Idea

Paul Downey

Who am I? Who are you? Who is anybody?

Paul Downey

One of the most difficult decisions in developing a Web site is how to manage user identity. As a user you have to assess the implications of connecting your Twitter or Facebook user to other random services. Meanwhile, enterprises are challenged to evaluate ever more magical products for connecting their silos with other silos, often in direct conflict with any desire for a RESTful architecture. Did innovation in authentication on the Web stop at usernames, passwords, and the HTTP Cookie? Does Firesheep mean you should serve everything over HTTPS? What happened to OpenID? Can outsourcing your userbase to Twitter, Facebook, Google or some other commercial entity really be a good idea? This talk has some answers, but mostly offers a wide-ranging and opinionated tour of the current state of identity on the Web. There will be URIs and angle-brackets, but mostly anecdotes involving venn diagrams, famous bridges, self-destructing kiosks and quantum computers.

Open Source Hardware at OTA11

Paul Downey

I spy

Paul Downey

ETSI Hell's Kitchen Debate, Nice 2009

Paul Downey

Denver

Paul Downey

XML Schema Patterns for Databinding

Paul Downey

The Best Web APIs are Web Sites

Paul Downey

The Web Is Agreement Opentech2008Paul Downey

Vrm Wedding

Paul Downey

Versioning XML and Open Source Tools

Paul Downey

Open Source, Agile, Life-StylePaul Downey

Extensibility And VersioningPaul Downey

Mashing up The Mobile

Paul Downey

More from Paul Downey (18)

ODI Lunchtime Talk, Creating an open register – what it takes and why

Building systems with integrity

Registers

Building systems with integrity

Standards are Great, but Standardisation is a Really Bad Idea

Who am I? Who are you? Who is anybody?

Open Source Hardware at OTA11

I spy

ETSI Hell's Kitchen Debate, Nice 2009

Denver

XML Schema Patterns for Databinding

The Best Web APIs are Web Sites

The Web Is Agreement Opentech2008

Vrm Wedding

Versioning XML and Open Source Tools

Open Source, Agile, Life-Style

Extensibility And Versioning

Mashing up The Mobile

Recently uploaded

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

Artificial Intelligence for XMLDevelopment

Octavian Nadolu

In the rapidly evolving landscape of technologies, XML continues to play a vital role in structuring, storing, and transporting data across diverse systems. The recent advancements in artificial intelligence (AI) present new methodologies for enhancing XML development workflows, introducing efficiency, automation, and intelligent capabilities. This presentation will outline the scope and perspective of utilizing AI in XML development. The potential benefits and the possible pitfalls will be highlighted, providing a balanced view of the subject. We will explore the capabilities of AI in understanding XML markup languages and autonomously creating structured XML content. Additionally, we will examine the capacity of AI to enrich plain text with appropriate XML markup. Practical examples and methodological guidelines will be provided to elucidate how AI can be effectively prompted to interpret and generate accurate XML markup. Further emphasis will be placed on the role of AI in developing XSLT, or schemas such as XSD and Schematron. We will address the techniques and strategies adopted to create prompts for generating code, explaining code, or refactoring the code, and the results achieved. The discussion will extend to how AI can be used to transform XML content. In particular, the focus will be on the use of AI XPath extension functions in XSLT, Schematron, Schematron Quick Fixes, or for XML content refactoring. The presentation aims to deliver a comprehensive overview of AI usage in XML development, providing attendees with the necessary knowledge to make informed decisions. Whether you’re at the early stages of adopting AI or considering integrating it in advanced XML development, this presentation will cover all levels of expertise. By highlighting the potential advantages and challenges of integrating AI with XML development tools and languages, the presentation seeks to inspire thoughtful conversation around the future of XML development. We’ll not only delve into the technical aspects of AI-powered XML development but also discuss practical implications and possible future directions.

20240609 QFM020 Irresponsible AI Reading List May 2024

Matthew Sinclair

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

nkrafacyberclub

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Free Complete Python - A step towards Data Science

RinaMondal9

GridMate - End to end testing is a critical piece to ensure quality and avoid...

ThomasParaiso2

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

DanBrown980551

Do you want to learn how to model and simulate an electrical network from scratch in under an hour? Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)! During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook. PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides: - A fully editable and extendable library for grid component modelling; - Visualization tools to display your network; - Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses; The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well. What you will learn during the webinar: - For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills; - For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024

Neo4j

Mind map of terminologies used in context of Generative AI

Kumud Singh

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Aggregage

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

National Security Agency - NSA mobile device best practices

Quotidiano Piemontese

GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024

Neo4j

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Paige Cruz

Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack. While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack. I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:

Recently uploaded (20)

Monitoring Java Application Security with JDK Tools and JFR Events

Artificial Intelligence for XMLDevelopment

20240609 QFM020 Irresponsible AI Reading List May 2024

The Art of the Pitch: WordPress Relationships and Sales

Essentials of Automations: The Art of Triggers and Actions in FME

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

DevOps and Testing slides at DASA Connect

Free Complete Python - A step towards Data Science

GridMate - End to end testing is a critical piece to ensure quality and avoid...

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

Epistemic Interaction - tuning interfaces to provide information for AI support

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024

Mind map of terminologies used in context of Generative AI

Generative AI Deep Dive: Advancing from Proof of Concept to Production

PCI PIN Basics Webinar from the Controlcase Team

National Security Agency - NSA mobile device best practices

GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Publishing Web Services Policies

1. Publishing Web Service Policies W3C Constraints and Capabilities Workshop, October 2004

2. BT Web Services • Web services for integration – 1000s ‘running the business’ • Web services for revenue – key part of 21CN Interoperability!

3. Policies agent interactions Status Signing Encryption shortcut negotiations Authentication Conformance Claims Availability Life Cycle Loading Privacy service QOS selection Price

4. Policy Framework Combinations Composition Vocabularies Privacy Security QOS … Uniform Assertions MetaData

5. Policy Environment • Evolution • Negotiation • Commitment

6. Workshop Use Case • ‘mustUnderstand’ mechanism • identification of message parts • combinations: – and, or, both, precedence, quantification • assertions: – description: interface,binding, endpoint – inside message contents

7. Obvious Candidates • WS-Policy • Features and Properties • Semantic Web activity • Others? none currently suitable for BT!

8. Conclusions • BT investing heavily in Web services • BT needs to publish policies • No interoperable mechanism exists • W3C can lead the industry towards a solution

9. Thank You! Paul Downey, BT Exact October 2004

Publishing Web Services Policies

Recommended

Recommended

More Related Content

Similar to Publishing Web Services Policies

Similar to Publishing Web Services Policies (20)

More from Paul Downey

More from Paul Downey (18)

Recently uploaded

Recently uploaded (20)

Publishing Web Services Policies