Secure XML: The New Syntax for Signatures and Encryption

Features

• Cover Type: Paperback with 560 pages
• Published by: Pearson Education
• Edition: 1st Edition July 19, 2002
• Written in: English
• ISBN 10 Number: 0201756056
• ISBN 13 Number: 978-0201756050
• Book Dimensions: 9.2 x 7.3 x 1 inches
• Weighs: 1.8 pounds

Book Info
Hands-on guide combines a strong foundation in XML with proven, practical techniques for enabling the secure transmission of data across the Web. Fully documents every feature and issue involved with XML security. Softcover.

Back Cover Copy


Extensible Markup Language (XML) is the environment of choice for creating many of today's technologically sophisticated and security-sensitive Web applications. With Secure XML, developers now have the hands-on guide they need to combine a strong foundation in XML with proven, practical techniques for enabling the secure transmission of data across the Web.

Broad-based and comprehensive, Secure XML fully documents every feature and issue involved with XML security. Opening with a complete introduction to XML, the book then provides detailed coverage of authentication, canonicalization, keying, encryption, algorithms, and more. Notes, background information, guidelines, and "soapbox," or heretical comments, expand on the book's practical focus throughout. In all, this book features the most comprehensive roadmap to digital security and XML encryption available.

Topics covered in-depth include:

• XML basics—documents, namespaces, structures, DTDs and schemas, and stylesheets
• XPath, XPointer, and SOAP
• Digital cryptography basics--secret and public key ciphers, asymmetric keys, digital signatures, and certificates
• XML canonicalization, signatures, and authentication
• XML encryption
• Key management and combining encryption with signatures
• Cryptographic algorithms and noncryptographic algorithms

Detailed and practical, this book provides reliable solutions for securing XML and for safeguarding information flow across today's sophisticated Web.

0201756056B06262002

Reader Reviews
This book is actually two books - a thorough technical discussion of XML, SOAP and related technologies, and a detailed description of security infrastructures based on cryptography, digital signatures and encryption. As such it's best suited for two audiences: (1) enterprise security experts who understand the security infrastructure, but who lack a working knowledge of XML (or web services as a whole), and developers and architects who may be thoroughly familiar with XML, but who need to understand security as it applies to XML and related protocols and services. Neither audience may be completely satisfied with the book because half of the material will be too basic. However, it does draw together two groups - security and development - that need to work closely together. What I like about the book is the clear writing and copious use of illustrations. In fact, the illustrations are a highlight because they help to convey complex topics that would have taken many more pages to explain with text alone (as well as put one to sleep). More importantly, the information is technically accurate, especially with respect to the security-related chapters. It's apparent that the authors know both XML and security exceptionally well. I also like the comprehensive coverage of both XML (and related technologies) and security, and how the authors take each in insolation, then tie them together into a coherent explanation of how to achieve XML security. This is no small feat, and is also why much of the material in the book may seem too basic or redundant to some readers. In addition to clear, accurate information the authors are not reticent about expressing views that run counter to mainstream wisdom, which is refreshing and, at times, amusing. Moreover, they do not hesitate to point out weaknesses in any of the technologies discussed in the book. In my opinion this is an important book that is wide in scope, yet manages to seamlessly cover technical issues that are of interest to two widely different groups (security practitioners and architects/developers). Comment | | (Report this)