Regain Control...Secure the Dynamic Perimeter
White Papers
XML Threat Model for REST, SOA and Web 2.0
This technical document intended for Architects and Developers describes a comprehensive threat model for a new breed of threats based on XML content, including XML languages used in the Service Oriented Architecture (SOA) paradigm such as SOAP and the Web Services Description Language [WSDL]. This white paper also defines the concept of XML Intrusion Prevention (XIP) as an analog to traditional network-based intrusion prevention. A new type of threat called an XML Content Attack is described, and examples are provided for each layer in the threat model. This document is intended to help individuals and organizations discover and mitigate the rising number of threats in the Web 2.0 environment using a Service Gateway.
Comparison to IBM* DataPower X150
Intel® SOA Expressway (SOAE) provides superior performance for service mediation and governance use cases outpacing IBM® DataPower in a direct "apples-to-apples" comparison by 1.5X to 8X at half the cost. This paper presents benchmark test scenarios, cost analysis, and SOAE's multi-core optimized software architectural elements.
Taking Control of the Cloud for Your Enterprise - Addressing Security, Visibility, and Governance Challenges
This paper is intended for Enterprise security architects and executives who need to rapidly understand the risks of moving business critical data, systems, and applications to external cloud providers. The concept of a dynamic security perimeter is presented to help explain how to address: Insecure APIs, multi-tenancy, data protection, and tiered access control for cloud.
Secure Principal Propagation for BPMS White Paper
Describes the problem of principle id propagation encountered by BPMS systems as they attempt to expand workflows that cross-platforms and security domains. Outlines how Intel SOA Expressway can be used for service abstraction and credential mapping that enables expanded BPMS roll-out.
An Open Policy Framework for Cross-vendor Integrated Governance
In reality most technology stacks implement a hard coupling between the policy definition and the runtime execution environment. What is needed is an open, pluggable platform, and policy integration framework that allows an organization to bridge different vendor registries with various service implementations. This paper discusses how to achieve open and integrated governance.
Accelerate SOA Processing with Intel® SSE4.2 Instruction Sets
Intel SOA Expressway delivers continuous improvement for XML-based solutions through enhanced feature support for upcoming generations of Intel® architecture-based servers. Support for Intel® Streaming SIMD Extensions 4.2 (Intel® SSE4.2) instructions allow applications to immediately deliver performance improvements of as much as 20 percent or more on legacy systems that do not support this new instruction set architecture. Describes XML Parsing and the Parallel Tree Approach to Schema Validation.
Push-to-Test Independent Performance Assessment of Expressway
In this primary research, PushToTest, a company specializing in business optimization and information systems test automation, evaluates how SOA soft-appliance platforms fair by applying the PushToTest SOA performance and scalability test methodology to the Intel SOA Expressway software product.
XPath 2.0 Schema Validation & Content Checking - Application to Security Gateway Usage Models
XPath 2.0 offers functions and capabilities that enable SOA applications to greatly strengthen the content checking of messages while at the same time targeting those checks to just the parts of the documents that are relevant. Provides an overview of XPath 2.0 then describes new features in Intel SOA Expressway that make use of these new capabilities.
A Multi-Core Optimized Software Appliance - A New Breed of Service Intermediary
This article describes Service intermediary usage models, limitations of hardware XML & security gateway appliances, presents next-gen intermediaries, and publishes scenario benchmark testing results.
