Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management

[XML-DSIG] XML SignatureSyntax and Processing Rules. W3C Recommendation, February 12, 2002. http://www.w3.org/TR/xmldsig-core/

[XML-ENC] XML EncryptionSyntax and Processing Rules. W3C Recommendation, December 10, 2002. http://www.w3.org/TR/xmlenc-core/

[OASIS] WS-Security 1.0 Standard and Specifications. http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0.pdf

[WS-I] Web Services Security Basic Profile 1.0Working Group Draft. http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0-2004-05-12.html

[W3C] Web Services Architecture. W3C Working group Note, February 11, 2004. http://www.w3.org/TR/ws-arch/

[CJP2] Alur, Crupi, and Malks. Core J2EE Patterns, Second Edition. Prentice Hall, 2003.

[Sun J2EE Blueprints] Designing Web Services with the J2EE Platform, 2nd EditionGuidelines, Patterns, and Code for Java Web Services. http://java.sun.com/blueprints/guidelines/designing_webservices/

[DWS] Nagappan, Skoczylas, et al. Developing Java Web Services: Architecting and Developing Java Web Services. Wiley, 2002

[SAML] OASIS Security Services TCSAML Specifications. http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security

[SAMLP] WS-I SAML Token Profile Version 1.0 Working Draft. http://www.ws-i.org/Profiles/SAMLTokenProfile-1.0-2005-01-19.html

[REL] REL Token Profile. http://www.ws-i.org/Profiles/RELTokenProfile-1.0-2005-01-19.html

[XKMS] W3C XML Key Management Specification 2.0. http://www.w3.org/TR/xkms/