Kenai Systems Tackles Web Services Vulnerabilities with eXamineST.ROCKLIN, Calif. -- Web Services (1) Loosely, any online service delivered over the Web. Such usage appears in articles from non-technical sources, but not in IT-oriented publications, because definition #2 below describes the correct use of the term. Inspection Tool Adds Support for WS-Security and Message Validation Free 30-Day Trial Available for Immediate Download Kenai Systems, Inc., the Web services vulnerability assessment A Department of Defense, command, or unit-level evaluation (assessment) to determine the vulnerability of a terrorist attack against an installation, unit, exercise, port, ship, residence, facility, or other site. and management ("VAM VAM Vinyl Acetate Monomer VAM Vesicular-Arbuscular Mycorrhizae VAM Vitt Ariskt Motstånd (Swedish: White Aryan Resistance) VAM Vitt Ariskt Motstånd (Sweden) ") experts, today announced the commercial release of eXamineST, an advanced Web services inspection tool that enables developers to import WSDL (Web Services Description Language) An XML-based language for defining Web services. Developed by Microsoft and IBM, WSDL describes the protocols and formats used by the service. files and to test them for compliance with WS-Security standards and for other Web services security vulnerabilities. Kenai Systems is currently offering a free 30-day trial of eXamineST. The product is available for immediate download at www.kenaisystems.com. eXamineST is the second product released by Kenai Systems. Earlier this year, Kenai announced eXamine, a general-purpose Web services inspection tool. eXamineST builds upon the success of eXamine and includes support for WS-Security and enhanced message validation. "Our initial eXamine beta process provided us with valuable feedback from Web services developers and from our current and potential partners," said Bill Kesselring, CEO (1) (Chief Executive Officer) The highest individual in command of an organization. Typically the president of the company, the CEO reports to the Chairman of the Board. of Kenai Systems. "As a result, we greatly enhanced the functionality of the product and added the features valued by developers who are committed to best-practice vulnerability assessment and management implementations." Key Features and Benefits eXamineST is an important building block of a complete best-practices vulnerability assessment and management solution. eXamineST provides enhanced capabilities for inspecting WSDL files, support for OASIS' WS-Security specification and message validation. The tool is available as a standalone application and, soon, as an Eclipse plug-in. The enhanced feature set of eXamineST includes: Web Services Security --Support for WS-Security XML Encryption XML Encryption is a specification that defines how to encrypt the content of an XML element. It's recommended by the W3C. XML Encryption encompasses the encryption of any kind of data, including the encryption of XML. enables developers to encrypt individual Web Services data elements or complete Web services documents --Support for WS-Security Digital Signatures enables developers to add a digital signature to individual Web services data elements or complete Web services documents --Support for WS-Security User Security Tokens enables developers to create security tokens. It includes support for Username/Password and X.509 Certificate Token Profiles --Supports local key store Web Service Message Validation --Checks that Requests and Responses are valid XML XML in full Extensible Markup Language. Markup language developed to be a simplified and more structural version of SGML. It incorporates features of HTML (e.g., hypertext linking), but is designed to overcome some of HTML's limitations. --XML Schema Facets enables developers to manipulate any value that may be required or furnished by a Web service --Checks that SOAP protocol for the Request and Responses are valid; displays in tree and form view allows developer to edit contents --Checks that Requests and Responses conform to Verb 1. conform to - satisfy a condition or restriction; "Does this paper meet the requirements for the degree?" fit, meet coordinate - be co-ordinated; "These activities coordinate well" the WSDL definition --Supports import and export of WSDLs and saved entities such as requests and history to facilitate collaborative development or quality assurance and test activities --Check the validity of operation element values within the context of the WSDL definition Additional Features --An expanded console view provides a central window for error information and alerts --Execute WS-I (Web Services Interoperability Organization, www.ws-i.org) A consortium founded by Microsoft, IBM, BEA Systems and Intel that is dedicated to the development of Web services. Its goals are to provide guidance and education, to promote interoperability and to ensure that Web services conformance tests to support interoperability guidelines from the Web Services Interoperability The Web Services Interoperability Organization (WS-I) is an industry consortium chartered to promote interoperability amongst the stack of web services specifications. Organization Industry Praises Kenai Systems and eXamineST "We worked with Kenai Systems to ensure that we incorporated Web-based application security best practices into our product development," said Keith Gordon, vice president of systems development and engineering at DST (1) (DeSTination) Contrast with SRC, which is an abbreviation of "source." (2) (Digital Signal Trust Company, Salt Lake City, UT, www.digsigtrust.com) An organization that sets up and manages PKI systems for companies and industry groups. Innovis. "Kenai's holistic approach holistic approach A term used in alternative health for a philosophical approach to health care, in which the entire Pt is evaluated and treated. See Alternative medicine, Holistic medicine. is critical for the development and deployment of secure and reliable Web-based applications." "Recently, we've seen increasing demand from our customers for well-designed, easy-to-use software tools that address Web services vulnerabilities during development," said Mamoon Yunus, founder and CTO (Chief Technical Officer) The executive responsible for the technical direction of an organization. See CIO and salary survey. of Forum Systems, a leading provider of trust management and threat protection Web services security solutions. "eXamineST's support for WS-Security specifications addressing XML encryption and digital signatures will help developers build and deploy secure and more reliable Web Services. Our choice to distribute Kenai Systems' eXamineST is part of our commitment to providing complete automated Web security solutions." eXamine Also Available For those Web services developers who require the general-purpose WSDL inspection capabilities of eXamineST but who do not require support for the WS-Security specification, eXamine is also available for immediate download. Pricing and Availability Kenai is currently offering a free 30-day trial of both eXamine and eXamineST, priced at $70 and $299 per seat, respectively. Both products are available for immediate download at www.kenaisystems.com. About Kenai Systems Kenai Systems, Inc. is a leading provider of Web services vulnerability assessment and management solutions. Kenai Systems' solutions will enable businesses to realize the important strategic and financial benefits of Web services, without compromising their network security or increasing their security management costs. Kenai Systems was founded in April, 2004 and is headquartered in Rocklin, Calif. For more information, contact 916-783-6960 or visit www.kenaisystems.com. |
|
Printer friendly
Cite/link
Email
Feedback
Reader Opinion