InfoQ Homepage Enterprise Architecture Content on InfoQ
-
SOA Security in Practice
Nicolai M. Josuttis discusses various issues encountered when implementing SOA security: heterogeneity and debugging are problematic, ESB plays an important role, and costs involved.
-
Proving the Business Value of SOA
Anne Thomas Manes discusses SOA goals and objectives used to measure a system’s success, measuring the business value, SOA project metrics, and recommendations on proving the business value of SOA.
-
RESTful SOA or Domain-Driven Design - A Compromise?
Vaughn Vernon advocates using DDD’s strategic modeling patterns when integrating services in a RESTful SOA implementation, avoiding one of SOA’s pitfalls: focusing on services rather than the domain.
-
Zero Investment SOA
Eric Jan Malotaux discusses implementing SOA in small iterative steps, each step delivering value to stakeholders, using feedback from previous steps to adjust the requirements and design accordingly.
-
SOA Threat Modeling: Attacking and Defending REST, XML and SOAP-based Services
Jason Macy details the basic requirements for security testing and SOA gateway, attack examples and countermeasures to protect against SQL Injection, DoS, XSD Mutation, and Identity type of attacks.
-
Modern SOA Infrastructure and Open Source
Mark Little presents the constituents of a modern SOI and where open source implementations stand in terms of standards, tools, ease of use, performance and reliability.
-
The Role of Hypermedia and the Future of Web Integration
Guilherme Silveira considers that RESTful web services need to make use of hypermedia in order to be prepared for web integration. He shows how links can be used to create more decoupled services.
-
Enterprise SOA Security
Dirk Krafzig presents general aspects of implementing SOA security using a token and role-based approach rather than session and application-based access to resources, including organizational issues.
-
Deriving Agility from SOA and BPM - Ten Things that Separate the Winners from the Losers
Manas and Clemens discuss deriving business agility from SOA and BPM, how SOA and BPM enable agility, and pitfalls/recommendations for organizational culture, business and technical architectures.
-
Using REST for SOA
Stefan Tilkov makes a case for using REST for SOA showing how to implement tricky features like encapsulation, transactions, stateful communication, notifications, and security at the enterprise level
-
Google App Engine for Business 101
Christian Schalk introduces GAE, focusing on the upcoming GAE for Business, demoing some of its new features like hosted SQL, SSL, and SSO.
-
Architecting the Ultimate Control-Point-Advanced Cyber-Threat Mitigation
Blake Dournaee presents Intel’s Service Gateway, a security control point meant to secure on-premise and in the cloud .NET/Java-based web services from various security threats.