News Desk
The Role of Policy in SOA Governance
Any two components in a system that communicate with each other are coupled to a certain extent
Nov. 9, 2007 08:45 AM

The original goal of the Service Oriented Architecture (SOA) concept was to build flexible, loosely coupled systems. But any two components in a system that communicate with each other are coupled to a certain extent. As architects, our aim in deploying real world SOAs is to lessen that coupling between components. That means removing or lessening the runtime dependencies between them. These two tenets of SOA, however, loose coupling and distributed resources, are a double-edged sword: along with the potential for much greater IT flexibility and business agility, they bring the potential for harder oversight. Considering that we live in a new regulatory environment that requires much more stringent oversight, monitoring and enforcement of corporate and IT governance policies, we need a mechanism to span the service lifecycle and provide an abstraction layer that is declarative, configurable and centrally managed. The required level of abstraction for SOA sits at the Policy level. Policies contain assertions about the operational interfaces for components in an SOA. These include credential preferences, authentication and authorization mechanisms, signature and encryption preferences, identity sources, routing, transformations, versioning, reliable messaging and others. This talk will introduce the concept of Policy Driven SOA and discuss Policy, its role in SOA Governance, and the WS-Policy specification as the new contract abstraction for SOA.
Speaker Bio: Toufic Boubez is the co-founder and CTO of Layer 7 Technologies. Prior to co-founding Layer 7 Technologies, he was the chief Web services architect for IBM's Software Group and drove their early XML and Web services strategies. Toufic co-authored the original UDDI API specification. He’s the co-editor of the W3C WS-Policy specification, and is a co-author of the WS-Trust, WS-SecureConversation, and WS-Federation specifications. Toufic is a sought-after presenter and has chaired XML and Web services conferences. In 2002, InfoWorld named Toufic to its “Ones to Watch” list. An author of many publications, one of his most recent books is "Building Web Services with Java: Making Sense of XML, SOAP, WSDL, and UDDI."
Register for SOA World Conference & ExpoRegister for Virtualization Conference & Expo
Submit Your Paper to Present a Session
Sponsor SOA World / Virtualization Conference & Expo
Service-oriented architectures (SOAs) have evolved over the past few years out of the original vision of loosely coupled web services replacing constrained, stovepiped applications throughout enterprise IT. Every major enterprise technology vendor today has developed its own SOA strategy, supported by innumerable mid-size companies and start-ups offering specific SOA aspects or entire solutions. This explosive growth in SOA technology is in response to a global demand--IDC estimates that spending on SOA services alone will grow from $8.6 billion to more than $33 billion by 2010.
SOA World Conference & Expo
SOA World Conference & Expo 2007 brings together the best minds in the business to San Francisco for a two-day conference that offers comprehensive coverage of SOA and what it means to enterprise IT today. As Zapthink analyst Jason Bloomberg has noted, "SOA involves rethinking how the business leverages IT in many various ways." Attend SOA World Conference & Expo 2007 West and learn from more than 100 speakers about how SOA is transforming business--and the way IT and business managers think about their businesses, processes, and technology.
Virtualization Conference & Expo
The colocation of SOA World Conference & Expo 2007 West and Virtualization Conference & Expo delivers the most relevant content to IT and business. Conference attendees will be able to choose from four great tracks at this year's event. Mix and match all you want, or slot into your favorite topic for the duration! The tracks include:
• Web 2.0/AJAX and SOA
• Interop Standards and Services
• Real-World SOA
• SOA Technology
• Virtualization
• Specially Selected Hot Topics
A Duo of Power Panels
This year's conference will also feature two Power Panels. Don't miss the SOA/Web 2.0/AJAX Power Panel, and Virtualization Power Panel. The Power Panels are FREE to all attendees, and will be recorded for broadcast by SYS-CON.TV.
Receive a Week's Worth of Education in Two Information-Packed Days!
The best news for this year's conference delegates is that the "Golden Pass" registration now provides full access to all conference sessions.
About SOA News DeskSOA World Magazine News Desk trawls the world of distributed computing and SOA-related developments for the latest word on technologies, standards, products, and services and brings key information to you in a timely and convenient summary form.