- DataPower Technology, Inc. XML Web 2003 5
DATAPOWER XML WEB - Copyright 2003DataPower Technology, Inc. All Rights Reserved. DataPower Technology, Inc. DataPower DataPower ( ) DataPower 2003 5 2/17
DATAPOWER XML WEB - XML Web 4 XML WEB...4 XML WEB 10...6 1....6 2. XML...7 3....7 4. XML DOS ( )...8 5....8 6....9 7....9 8....10 9....10 10....11...12 2003 5 3/17
DATAPOWER XML WEB - XML WEB SSL IPSec XML Web XML SOAP IP IP XML Web Web XML Web XML WEB (IDS) IP IP (S2S) Web S2S XML Web XML Web @Stake 1 S2S 1 @Stake The Security of Applications: Not All Are Created Equal ( ) 2002 2 Andrew Jaquith 2003 5 4/17
DATAPOWER XML WEB - XML SOAP Web XML Web XML SOAP XML XML Encryption (XML )XML Digital Signatures (XML )WS-Security SAMLXACMLXKMSXML Schema (XML ) IP XML XML XML XML XML XML SOAP (1 ) 1 XML XML XML XML Web XML/SOAP App App 10 XML Web 2003 5 5/17
DATAPOWER XML WEB - XML WEB 10 XML Web 1. XML Web IP HTTP( )XML XML XML Web IPSec VPN SSL SSL SSL IP DNS SSL XML 2003 5 6/17
DATAPOWER XML WEB - 2. XML IP XML Web Web 80 443 Web XML SOAP @Stake 1 2 XML SOAP XML XML XML XML XML XML 3. 1 NAT (Network Address Translation) IP NAT XML Web XML URL NAT TCP URL 2 @Stake The Importance of Application Security ( ) 2002 3 Matthew Levine 2003 5 7/17
DATAPOWER XML WEB - 4. XML DOS ( ) XML DoS ( ) SYN IP DoS Web XML DoS IP 1 XML CPU DoS XML Apache IBM WebsphereMacromedia ColdFusion 3 BEA Weblogic XML XML XML XDoS IP DoS XDoS XML XML 5. XML XSD (XML Schema DefinitionsXML ) XSD DTD ( ) XML XML ( ) 3 SecurityTrackerDTD Xerces XML Parser DoS 2002 12 2003 5 8/17
DATAPOWER XML WEB - ID (SOAP ) XML XML 4 XML 6. URL XML XML XML ( ) XML XML 1 XSLT XSLT XML XSLT 7. XML Web ID IETF W3C XML XML XML XML 2003 5 9/17
DATAPOWER XML WEB - 8. NTP ( ) XML XML 9. SSL IPSec XML XML XML Web ID XML (2 ) 2: XML 2003 5 10/17
DATAPOWER XML WEB - W3C XML XML 1 HTTP ( ) 3 XML TCP TCP XML XML 1 / XML XML SSL IPSEC DES 3DES RSA XML 80% XML XPath XML XML XML XML XML XML PKI SSL VPN XML / / XML PKI LDAP XKMS SAML Web PKI 10. XML Web XML XML 2003 5 11/17
DATAPOWER XML WEB - 1 XML XML Web Web Web 2 XML Web XML XML 1 XML XML XML 2003 5 12/17
XML Web A API (Application Program Interface) AUP (Acceptable Use Policy) B B2B (Business-to-Business) BTP (Business Transaction Protocol) (B2B) XML C COM(Component Object Model) Microsoft CORBA(Common Object Request Broker Architecture) OMG (Object Management Group) OS D DCOM (Distributed Component Object Model)COM Microsoft LANWAN DMZ (DeMilitarized Zone) ( ) DMZ DMZ Web(HTTP) FTP SMTP(e-mail) DNS DOM (Document Object Model) ( ) DTD (Document Type Definition) XML SGML XML SGML E ebxml (electronic business XML) XML ebxml (FTP SMTPHTTP) ebxml
H HTTP (Hyper Text Transfer Protocol) Web J JAXP (Java API for XML Processing)XML JavaTM APIDOM SAXXSLT XML JAXP XML XML XML ( ) L LDAP Lightweight Directory Access Protocol LDAP X.500 LDAP LDAP O OASISOrganization for the Advancement of Structured Information Standards OASIS OASIS Web XML OSI (ISO) OSI (Open Systems Interconnect) 7 Please Do Not Throw Sausage Pizza Away 1 7 ( (Physical) (Data) (Network) (Transport) (Session) (Presentation) (Application)) P P2P ( ) S SAML - Security Assertion Markup Language (SAML) XML (extensible Markup Language) SAML SAML SOAP (Simple Object Access Protocol) XML SOAP XML HTTP
U UDDI (Universal Description, Discovery, and Integration) Web XML Web W Web URI (Uniform Resouce Identity) WS-Security OASIS Web SOAP Web WS- Security WS-Security PKIKerberos SSL WS-Security WSDL (Web Services Definition Language)UDDI Web XML Web Microsoft IBM WSDL UDDI X XACML (XML Access Control Markup Language)XACML OASIS XML XACML / ( ) / ( ) ( ) XDoS (XML Denial of Service) XML SOAP IP DoS 1 XML XKMS (XML Key Management Standard)XKMS Web PKI ( ) XML Key Management Specification W3C XKMS XincludeXML XML Xlink (XML Linking Language) XML XML (extensible Markup Language)Web XML XML XML W3C XML XML XML XML (XML-Aware Network) XML ( XPath )
XML XML XPath XML Xpointer (XML Pointer Language) XML XqueryXML XSD (XML Schema DefinitionXML ) XML XSL (extensible Stylesheet Language)XML XSLTXPathXML-FO (XML Formatting Objects) XSLT (extensible Stylesheet Language Transformation) XML /
03 (5561) 7190 06 (6399) 0244 URL http://www.tel.co.jp/cn/