The security standards within the Web Services Framework (WSF) have made significant progress, and a wide variety of products support Web Services Security (WS-S), the foundation of the WS-* security architecture. But Diana Kelley, a senior analyst at Burton Group, has a caveat: "Just because the standards are on track doesn't mean we've solved all the problems. Organizations still have a lot to think about."
Since security is frequently an afterthought, the fact that security standards are being hammered out early in the Web services and SOA deployment stage is promising, Kelley said, but she stressed that standards are only one part of a security strategy.
