The adoption of Web services and service-oriented architecture (SOA) paradigms to perform more critical online transactions has resulted in the urgent need to audit and assess these applications for security vulnerabilities. Many enterprises are currently developing new Web Services and/or adding and acquiring Web services functionality into existing applications, and with cyber crime also on the rise, Web services security is more important than ever and businesses must incorporate security best practices into application development. In order for Web services to reach its full potential, inherent security issues must be recognized and addressed. This session will demonstrate common Web services vulnerabilities, techniques for exploiting and protecting Web services and the attacks that they can enable. Participants will learn, through an interactive demonstration, what vulnerability indicators hackers look for and the various methods used to exploit them. Due to the fact that enterprises continue the push to build and deploy Web services to meet future online security changes, the audience will learn how to discover vulnerabilities within their own Web services applications as well as tips and techniques for building and securing next-generation applications.

Danny Allan is Director of Security Research with Waltham-based Watchfire, a provider of software and services to help ensure the security and compliance of Websites. In 2000, he joined Watchfire bringing with him several years of business and technology-related experience including penetration testing and internal system remediation for one of Canada's biggest universities. In his role as security analyst, he is closely involved with enterprise global customer deployments, researching and evaluating technologies, and helping define and recommend strategic directions for Watchfire's security solutions. In his more than six years with Watchfire, Allan has held several critical customer-facing positions, including Team Lead, Consulting Services and Sales Engineer. He holds a Bachelor of Commerce with a major in Information Systems from Carleton University.

View Video

Third International "Virtualization Conference & Expo" Call for Papers Now Open
Virtualization, the hottest subject in all IT right now, will be center stage in New York City - 23-24 June, 2008, at the next conference and expo in the SYS-CON Events' third international Virtualization Conference & Expo.

Key opinion-formers in the field of infrastructure and pioneers of virtualization technologies of all types have already begun submitting speaking proposals to Virtualization Conference & Expo 2008 East, being held in New York City, 23-24 June, 2008. Topics covered will range from Application Virtualization, Desktop Virtualization, Network Virtualization, Server Virtualization, and Storage Virtualization, to Virtual Machine Automation, Physical to Virtual (P2V) Migration, Management Applications, Tools and Utilities, and Virtualization Scripts and Procedures.

Submissions on these and dozens of other topics have already begun streaming in. The Call for Papers is as always a 100% online process, found here.

IDC has stated that the virtualization services market alone is going to reach $11.7 billion by 2011 and in general this technology, which has been around for a good number of years, seems suddenly to be on everyone's mind.

In short, Virtualization is fast becoming a key requirement for every server in the data center, enabling increased workloads in server consolidation projects, efficient software development and testing, resource management for dynamic data centers, application re-hosting and compatibility, and high-availability partitions.

Help with that transformation: submit your speaking proposal today.

Topics will include:

• Server Virtualization
  
• Desktop Virtualization
  
• File Virtualization
  
• The Future of the Virtual Enterprise
  
• Hosted Virtualization
  
• Para-virtualization
  
• Virtualization Hardware Support
  
• Hardware-level Virtualization
  
• Storage Virtualization
  
• Virtualization for Server Consolidation and Containment
  
• Windows Virtualization
  
• Utility Computing
  
• State of the Virtualization Services Market