Business Services Industry

Forum Systems Launches the Forum Java Web Services Security Software Development Kit v1.0 for Application Container Security; Tool Enables Web Services Developers to Shorten Development Lifecycle and Maintain Control over Message Security

Business Wire, May 31, 2006

SALT LAKE CITY -- Forum Systems, the leader in Web Services and SOA security infrastructure for XML acceleration, threat protection and trust management, today released the Forum Java Web Services Security (JWSS) Software Development Kit (SDK) version 1.0 offering developers a comprehensive library of application programming interfaces (API's) to leverage in coding Web Services applications. The JWSS SDK v1.0 addresses the need for security to be enforced within the application itself in order to ensure privacy and integrity of Web Services and SOA applications.

Forum JWSS SDK v1.0 allows developers to administer and apply security policies within J2EE compliant Application Servers using a declarative security model and API's for XML message authentication and authorization. The Application Server is then responsible for applying these security constraints to the code at runtime. Adding XML security within business logic prevents transactions from bypassing third-party enforcement points that would violate regulatory compliance or work flow security. Companies should complement this developer-centric approach with an "interception" model using a SOA Gateway or XML Firewall within a DMZ (Demilitarized Zone) for a global and scalable SOA security and acceleration strategy.

"There are business applications in which security must be enforced at the exact location where information is being processed for privacy reasons," said Walid Negm, vice president of marketing for Forum Systems. "In certain financial services and government settings, the origin of messages must be verified at the point of consumption to ensure that they were not physically intercepted. When using XML Encryption within the application, Forum's JWSS SDK v1.0 equips the developer with XML security functionality to decipher and verify the message contents," Negm added.

About Forum Systems

Trustworthy, ubiquitous and robust Web Services can only be achieved by combining security controls that are proactive, always on and systematic. Forum Seamless Security Solutions Architecture (Forum S3A(TM)) is an adaptive approach to building security-minded service-oriented applications and data-level networks using life-cycle solutions including vulnerability management, testing systems, firewalls and gateways. Forum products are available as software, PCI-card and appliance options and comply with government requirements including CheckPoint OPSEC Certification, FIPS Certification, Common Criteria EAL 4 (in process) and JITC DoD PKI Certification. Forum Systems is an active a member of OASIS and WS-I helping mature standards such as WS-I Basic Profiles, SAML and WS-Security. Customers can benefit from Forum technology that is bundled with market-leading products: Microsoft ISA Server 2004, NetContinuum NC-1000 WSE, Crossbeam Systems, Breach Security and Network Engines NS6300X. For more information on adaptive solutions for Web Services security please visit http://www.forumsys.com.

Forum Systems, Inc. is the Leader in Web Services and SOA Security(TM) infrastructure with a comprehensive suite of XML acceleration, trust management and threat protection solutions for the automated Web. Forum Systems' flexible hardware, software and embedded products make vibrant business communications possible by actively protecting XML data and Web Services across networks and business boundaries. Forum's products have been chosen by over 150 Fortune 1000 industry leaders and are winners of Network Computing Magazine's Well-Connected 2006 and 2004 Awards and Product of the Year 2004 Award, Network Computing Magazine's Editor's Choice 2003 Award, Network Magazine's Product of the Year 2003 Award and most recently "Most Outstanding Product of the Year 2006" Well-Connected Award by CMP Media. Forum XWall Web Services Firewall was also the industry's only XML Firewall selected by InfoWorld LEADERBOARD 2004. Visit Forum at http://www.forumsys.com/.>