Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management

[W3C] XML SignatureSyntax and Processing Rules. W3C Recommendation, February 12, 2002. http://www.w3.org/TR/xmldsig-core/

[W3C] XML EncryptionSyntax and Processing Rules. W3C Recommendation, December 10, 2002. http://www.w3.org/TR/xmlenc-core/

[OASIS] WS-Security 1.0 Standard and Specifications. http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0.pdf

[WS-I] Web Services Security Basic Profile 1.0Working Group Draft. http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0-2004-05-12.html

[W3C] Web Services Architecture. W3C Working Group Note, February 11, 2004. http://www.w3.org/TR/ws-arch/

[Sun J2EE Blueprints] Designing Web Services with the J2EE Platform, 2nd EditionGuidelines, Patterns, and Code for Java Web Services. http://java.sun.com/blueprints/guidelines/designing_webservices/

[Ramesh Nagappan, Robert Skoczylas et al.] Developing Java Web Services: Architecting and Developing Java Web Services, Wiley 2002.