Tony Nadalin

Securing access to information is basic to any application. Security becomes even more critical for implementations structured according to SOA principles due to their loose coupling of services and applications and their operation across organizational boundaries. Such an environment often exposes the delicacy or limitations of existing security implementations. Irrespective of the efficiencies brought by model-driven development and SOA-based service management, business applications must continue to secure information. Merely securing the perimeter (such as firewalls and routers) is insufficient, because an On Demand Business needs to be able to set up and tear down dynamic trust relationships as relationships among its partners, customers, and employees evolve. Thus,... (more)

Automated Identity Management

In this Q&A, Tony Nadalin, chief of security architecture for IBM Software discusses ways in which companies can protect their mission critical data even as they connect their networks with outside partners. What Is Identity Management? Why Is It Important to Web Services? The goal of identity management is to use accurate knowledge of your users to reduce costs, improve security, and achie... (more)