WS-Security

WS-Security (Web Services Security) is a communications protocol providing a means for applying security to Web Services. On April 19 2004 the WS-Security 1.0 standard was released by Oasis-Open.

Originally developed by IBM, Microsoft, and VeriSign, the protocol is now officially called WSS and developed via committee in Oasis-Open.

The protocol contains specifications on how Integrity and Confidentiality can be enforced on Web Services messaging. The WSS protocol encompass the use of protocols such as SAML and Kerberos (protocol), and format such as X.509.

=See Also=

*WS-I Basic Security Profile *Web Services *SAML *X.509

=External Links=

*[http://www.oasis-open.org/committees/tc_home.phpwg_abbrev=wss OASIS Web Services Security TC] (Contains links to download specification documents) *[http://www-106.ibm.com/developerworks/webservices/library/ws-secure/ WS-Security Specification] *[http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0.html WS-I Basic Security Profile] *[http://www.cgisecurity.com/ws/ Web Services Security Documentation]