We're all packed for the upcoming SoftwareAG InnovationWorld 2008 conference in Miami next week. Looking forward to a lot of good dialogue with customers and partners there - last year's was one of the most valuable SOA/BPM/Integration conferences we've seen.
If you're going, check out our session Wednesday morning (10:30am) with Software AG's VP of SOA Products Jignesh Shah, and iTKO's CMO Jim Mackay on "The Secured, Tested & Virtualized SOA."
There is a lot of confusion in the market about where the external concept of Security ends, and where the Validation of secure and appropriate behaviors within SOA begins. In reality, to avoid risk, you need both. Proper Security protocols, and strong management of who is authorized to participate in SOA apps is critical.
But once you have dozens of partners inside the "gate," Validation needs to take over, to ensure that the kinds of Policies that can't be managed structurally are being met. For instance, are participants ONLY seeing the information they should see? Is there a limitation on transaction volume, or being able to edit/delete orders and data? As you can see, there are many Policies to validate within our applications, especially when you have multiple partners consuming and sharing Services.
Then, Service Virtualization adds to the mix by allowing all of the teams to have very "safe" Virtual Services available 24/7 that they can develop and test throughout their own lifecycle, without impacting the performance or security of live business services, or being privy to live customer transactions. Of course the best byproduct of this is the agility and cost savings you can gain, through elimination of constraints throughout the lifecycle of development and testing.
Hope to see you in Miami - perhaps the best place to be in the continental US in November!

Comments