How to Fail at SOA
Renowned
security expert, K.
Scott Morrison, VP of
Engineering and Chief
Architect at Layer 7
Technologies, delivered
an innovative and
example-packed talk on
“How to Fail at SOA”
at the SOA Consortium’s
June meeting.
Calling
on Layer 7 Technologies’
six years of experience
– “an eternity in
the SOA world” –
Scott warned meeting
attendees about repeated
patterns of bad
practices, pitfalls and
bad decisions. Focused
in the security realm,
Scott reenacted customer
scenarios that
highlighted breakdowns
with goals, teams,
planning, knowledge and
physical design.
For
each identified problem,
or anti-pattern, Scott
provided insights on how
SOA practitioners can
recover from, or better
yet, avoid the pitfall.
These insights covered a
wide range, including
proper understanding of
security standards,
security design tips,
skills, team
composition, training
and business outcome
identification. Scott
pointed out how SOA
based implementations --
with their highly
distributed, cross stack
natures -- bring
together a diverse group
of new stakeholders that
must collaborate for
success.
In
closing, Scott
encouraged attendees to
treat security and
management as first
class citizens of SOA
efforts, rather than
falling into the trap of
patchwork retrofitting.
Presentation
Abstract:
Successful SOA really
means success with an
actual implementation.
SOA never appears as a
big bang. Instead,
it begins small,
emerging from the
primordial network ooze
as a proof-of-concept or
a modest suite of Web
services applications.
For over six years,
Layer 7 Technologies has been
building real SOA's for
government and
some of the
world's largest
corporations.
In this time,
they have seen
repeated
patterns of bad
practices,
pitfalls, and
simple bad
decisions.
Avoid these, and
your SOA might
just succeed.
About the Speaker:
Scott Morrison is
the VP of Engineering
and Chief Architect at
Layer 7 Technologies,
where he is leading a
team to develop the next
generation of security
infrastructure for Web
services. An architect
and developer of highly
scalable, enterprise
systems for over 15
years, he has extensive
experience across
industry sectors as
diverse as health,
travel and
transportation, and
financial services.
Scott has also been a
Director of Architecture
and Technology at
Infowave Software, a
maker of wireless
security and
acceleration software
for mobile devices, and
held senior architect
positions with IBM.
Before shifting to the
private sector, he spent
a number of years at the
world-renowned medical
research program of the
University of British
Columbia, studying
neurodegenerative
disorders using medical
imaging technology.
Scott is a dynamic and
highly sought-after
speaker. He has
published over 50 book
chapters, magazine
articles, and papers in
medical, physics, and
engineering journals. He
is the recent co-author
of Java Web Services
Unleashed and
Professional JMS. Scott
is an editor of the WS-I
Basic Security Profile,
as well as a co-author
of the WS-Federation
specification. His
current interests are in
Web services security,
secure mobile computing,
grid systems, and
enterprise system
architectures.
Register to download the
podcast and slide presentation:
|
