How to Govern and Secure your SOA

TECHNOLOGY TRANSFER PRESENTS

MAX DOLGICER SOA How to Govern Architecture, and Secure Standards, your SOA Technologies and the Cloud DECEMBER 13-15, 2010

DECEMBER 16-17, 2010

VISCONTI PALACE HOTEL - VIA FEDERICO CESI, 37 ROME (ITALY)

info@technologytransfer.it www.technologytransfer.it

SOA ARCHITECTURE, STANDARDS, TECHNOLOGIES AND THE CLOUD

ABOUT THIS SEMINAR There has been a lot of talk about unsuccessful SOA projects during the last couple of years. Some analysts have gone as far as pronouncing SOA dead. The truth is there is nothing wrong with SOA, but it has often been the victim of “identity theft”: Web Services technologies and Middleware products pretend to be the architectural blueprint for your SOA. However, SOA’s true identity lies in the Best Practices for Service Orientation, a well defined architecture blueprint, and Service Oriented development processes that we can rely on to achieve predictable results.

Many companies have embraced a SOA approach for development and integration projects. Now they are embarking on the next phase – a more systematic adoption of Service-Oriented practices. However, simply buying into Middleware technologies like Enterprise Service Bus and the latest generation of development tools is not sufficient for successful implementation of an Enterprise SOA. It is time to expand our view on SOA: how can we assess the maturity level of our organization and define a roadmap for future projects? How do we navigate the increasing number of standards and overlapping product offerings? Governance and security have to be our top priorities, and we need to prepare our service based applications to run in a Cloud without requiring costly modifications.

This seminar starts with examples of key Business strategies that drive SOA and explains how SOA can enable them. It then discusses the progression of a SOA through three phases: we will talk about the typical elements that comprise a basic SOA, followed by the second phase where services are being virtualized and Middleware technology is introduced as an intermediary, and finally moving SOA into the Cloud in the third phase.

The seminar then outlines the important aspects that have to be addressed when defining an architecture blueprint, which is the cornerstone of a successful SOA. This includes defining a loosely coupled architecture and proper separation into service layers (i.e. orchestration, application, and infrastructure services), as well as a comparison of traditional, Web Services based and RESTful architectures. The seminar also shows how SOA enables new types of clients and discusses the key standards that one should consider when implementing services.

Next, the seminar gives you insight into the organizational challenges that IT managers face with the adoption of SOA. It emphasizes the role of Governance for IT organizations that need to increase their maturity level in order to evolve SOA to a large (Enterprise) scale. It shows how to master the full service lifecycle – including design, implementation, deployment, and management - through efficient Governance.

The seminar then examines Open Source tools in terms of their support for SOA and concludes with a Case Study that highlights how the concepts taught in the seminar have been applied in a real world project.

WHAT YOU WILL LEARN • Learn how SOA can facilitate the alignment of IT with your Business • Identify the challenges and benefits of developing an Enterprise Architecture • Determine where your organization is located in a SOA Maturity Model, define a SOA Roadmap to move to the next level, and put the right SOA Governance mechanisms in place before your SOA spins out of control • Learn how IT culture has to change to successfully adopt the new style of architecture • Understand how Web Services and other standards can be used to implement a SOA • Discover the role of Open Source tools in a Service Oriented Architecture • Learn how Enterprise Service Buses (ESB) can enable and facilitate integration of applications within your Enterprise and across a B2B value chain • Understand the key elements of a Service Oriented Software Development Life Cycle

OUTLINE 1. The Business Perspective • How SOA enables Business strategies • How to align Business and IT through SOA • SOA use case examples 2. SOA Phase 1: SOA 101 • Services defined • SOA defined • The Changing Notion Of “Applications” • The Service Layer model • Next Generation SOA - SOA vs. Event Driven Architecture (EDA) • Degrees of Service Orientation • SOA and standards • SOA challenges • Typical SOA categories

• Service virtualization • Server virtualization 4. SOA Phase 3: Moving into the Cloud • Cloud definition • Typical usage scenarios • Chose your Cloud flavor: IaaS, SaaS, or PaaS? • Sample Cloud architecture: IBM Blue Cloud • IaaS example: Amazon Web Services (AWS) • Moving into the Cloud - Resource virtualization - Automated, on-demand provisioning - Example: GrepTheWeb application on Amazon - Shared infrastructure and applications - Building Multi-Tenancy Applications

3. SOA Phase 2: Service Oriented Integration (SOI), Mediation & Service Virtualization

5. First Things First: Defining the Architecture

• Increased Business velocity challenges IT - The IT response: Service Oriented Integration (SOI) - What integration functionality do we need?

- From SOA to Service Oriented Integration (SOI) - How standards can enable Plug & Play integration • Evolving the approach to integration - The need for intermediation - Enterprise Service Bus (ESB) * Introducing the bus * Moving beyond basic mediation * Implementation choices for intermediaries

• Definition of (Enterprise) Architecture - Enterprise Architecture and SOA - What drives the need for architecture?

- Architecture objectives and standards • Logical vs. physical architectures • Sample outline for an architecture document • Sample Business event walkthrough • Composite Applications – a prevalent application architecture enabled by SOA • SOA and the data architecture • Rich Internet Applications (RIAs) and SOA

• Moving beyond SOA with “Killer Applications” - Business Activity Monitoring (BAM) - Complex Event Processing (CEP) • Conclusions 6. Standards that are Important for SOA • Overview of standards bodies • Establishing connectivity through SOAP • Defining service interfaces with Web Services Definition Language (WSDL) • Representational State Transfer (REST) • JavaScript Object Notation (JSON) • Governing services with Service Repositories and Service Registries (UDDI) • Using Business Process Execution Language (BPEL) and Business Process Management Notation (BPMN) for orchestration • Extending automated Business processes with human tasks – BPEL4People • Web Service Invocation Framework (WSIF) • Asynchronous service interaction: Notification • Reliable Messaging • Security • Transactions • Mapping standards to SOA 7. The IT Perspective: Managing the SOA Evolution • Why SOA needs governance • Business vs. IT vs. EA vs. SOA Governance • Categories of SOA Governance

• SOA Governance goals • Implications on the IT organization • Migration from previously existing architectures • Service oriented development – a new SDLC methodology • Overview of SOA maturity models • Managing SOA adoption

• Designing the Schemas • Interface consolidation • Determining the right degree of Service Orientation • Designing the components • Composing Business processes • Detailed B2B Gateway Logical Architecture

8. Open Source Software (OSS) for SOA

11. Conclusions

• OSS definition • Why use OSS? • Linux, Apache, mySQL, PHP (or Perl) = LAMP • OSS for SOA - Java Application Servers - Spring Framework - Enterprise Service Buses - Web Services - Other tools • OSS vs. Java and Microsoft • How OSS and SOA relate • Concerns about OSS 9. Service Oriented Analysis and Modeling - Customer Case Study Part I • Case Study Overview • B2B Integration Strategy • Business Process Walk-Through • Project Scope • Business modeling • Definition Of Services & Layering • Verify SOA Principles 10. Service Oriented Design Case Study Part II • Designing service interfaces • Encapsulation of existing Business logic

• Seminar conclusions • SOA outlook

WHO SHOULD ATTEND • Architects who want to adopt a Service Oriented Architecture • IT Professionals who need to see how SOA can be applied to development as well as integration projects • IT Managers and IT Strategists selecting new standards and products for Enterprise Architecture • IT Managers and IT Strategies evaluating feasible strategies for application development and integration • Architects and Application Developers who want a detailed look at the different technologies that can be used to implement SOA • Architects and Developers who want to know how these technologies can be applied to both, EAI and B2B Application Integration • Consultants who need to recommend and use different implementation strategies for building a SOA

HOW TO GOVERN AND SECURE YOUR SOA

ABOUT THIS SEMINAR Once a company has completed initial SOA projects, the number of deployed services increases such that the key question no longer is how to build services, but rather how to efficiently govern the development and operation of services on an Enterprise scale. The focus of SOA shifts to reusability, securing how a growing number of clients access the services, and assuring that Service Level Agreements (SLAs) are met, to name just a few issues. At this point companies run the danger that a “free for all” environment proliferates, and the benefits of SOA cannot be realized. The key is to introduce SOA Governance before services spin out of control.

It is of equal importance to adjust the approach to security. Traditional Web applications are well understood in terms of their security challenges and the typical solutions that can be employed. Once we migrate to SOA, the picture becomes much more complex: SOA introduces new components, for example an Enterprise Service Bus (ESB), SOA appliances for XML acceleration, security, and management, new technologies like XML, SOAP and Web Services, intelligent (B2B) clients that interact with RESTful systems, etc.

This seminar first gives a brief recap of the key SOA principles and then discusses the SOA security challenges. It shows how to use a maturity model to build your SOA Roadmap; it discusses how SOA Governance relates to Business, IT, and Enterprise Architecture (EA) Governance; it details what comprises SOA Governance, and it provides insights into current Governance standards, technologies and vendor approaches.

WHAT YOU WILL LEARN • Understand the complexity of security in SOA compared to traditional Web applications • See how the different SOA projects in your organization fit into the big picture of a SOA Maturity Model and how to develop your SOA Roadmap • Distinguish between Business, IT, EA and SOA Governance • Understand how to govern the complete services lifecycle – from design time to run-time • Be able to define practical guidelines and policies to assure that project teams follow a consistent approach to service design and implementation

OUTLINE 1. Understanding SOA basics • SOA and services defined • The Service Layers • Client/Server SOA vs. EventDriven SOA (a.k.a. EDA) • Typical SOA applied: The Composite Applications • SOA vs. RESTful architectures • Understanding SOA categories 2. SOA Security • Web application security vs. SOA security - Security in traditional 3-Tier Web application systems - Extending the Web application system with SOA • How to protect the complex SOA - Identity management - Authentication and authorization - Auditing - Data Protection • Security standards for SOA - WS-Security - Extensible Access Control Markup Language (XACML) • A consolidated security architecture for Web applications and SOA 3. Planning the SOA Evolution: SOA Maturity Model and SOA Roadmap • Defining the goals – SOA maturity models - The Open Group Service Integration Maturity Model (OSIMM) - Overview - Maturity dimensions - Maturity levels - How to assess your SOA maturity and determine where you are?

- Progress Software Maturity Model

• How do we get there – developing a SOA Roadmap • Project example for mapping a Maturity Model to a Roadmap 4. Managing the SOA Evolution: SOA Governance Overview • Why SOA needs Governance • Business vs. IT vs. EA vs. SOA Governance • Categories of SOA Governance - Design time Governance - Run time Governance • SOA Governance goals • SOA Center Of Excellence (COE) 5. SOA Governance Frameworks • Open Group standards - SOA Governance Reference Model (SGRM) - SOA Governance Vitality Method (SGVM) 6. SOA Governance Technologies • How to select SOA Governance technologies?

- Mapping Governance processes to technologies • What Meta-data do we need to maintain?

• Integrated approach to SOA Governance • Repositories & registries • Product examples 7. Recap and Conclusions

WHO SHOULD ATTEND • Architects who want to define a roadmap for the evolution of SOA throughout the Enterprise • IT Professionals who need to see how SOA can efficiently be applied on large scale projects • IT Managers and IT Strategists who need to define policies for service development, operations, and service security • Architects and Developers who want to understand the impact of SOA Governance on their projects • Consultants who need to recommend and use Governance strategies and technologies for SOA

INFORMATION PARTICIPATION FEE

HOW TO REGISTER

GENERAL CONDITIONS

SOA Architecture, Standards, Technologies and the Cloud € 1500

You must send the registration form with the receipt of the payment to: TECHNOLOGY TRANSFER S.r.l.

Piazza Cavour, 3 - 00193 Rome (Italy) Fax +39-06-6871102

GROUP DISCOUNT

How to Govern and Secure your SOA € 1200

Special price for the delegates who attend both seminars: € 2500 The fee includes all seminar documentation, luncheon and coffee breaks.

VENUE Visconti Palace Hotel Via Federico Cesi, 37 Rome (Italy)

within November 29, 2010

PAYMENT

Wire transfer to: Technology Transfer S.r.l.

Banca Intesa Sanpaolo S.p.A. Agenzia 6787 di Roma Iban Code: IT 34 Y 03069 05039 048890270110

If a company registers 5 participants to the same seminar, it will pay only for 4.

Those who benefit of this discount are not entitled to other discounts for the same seminar.

EARLY REGISTRATION

The participants who will register 30 days before the seminar are entitled to a 5% discount.

CANCELLATION POLICY

A full refund is given for any cancellation received more than 15 days before the seminar starts. Cancellations less than 15 days prior the event are liable for 50% of the fee. Cancellations less than one week prior to the event date will be liable for the full fee.

SEMINAR TIMETABLE CANCELLATION LIABILITY

In the case of cancellation of an event for any reason, Technology Transfer’s liability is limited to the return of the registration fee only.

9.30 am - 1.00 pm 2.00 pm - 5.00 pm

MAX DOLGICER first name ...............................................................

SOA ARCHITECTURE, STANDARDS, TECHNOLOGIES AND THE CLOUD Rome December 13-15, 2010 Visconti Palace Hotel - Via Federico Cesi, 37 Registration fee: € 1500

surname .................................................................

Stamp and signature job title ................................................................... organisation ...........................................................

HOW TO GOVERN AND SECURE YOUR SOA Rome December 16-17, 2010 Visconti Palace Hotel - Via Federico Cesi, 37 Registration fee: € 1200

address .................................................................. postcode ................................................................ city .........................................................................

BOTH SEMINARS Special price for the delegates who attend both seminars: € 2500

country ................................................................... telephone ............................................................... fax ..........................................................................

If anyone registered is unable to attend, or in case of cancellation of the seminar, the general conditions mentioned before are applicable.

e-mail .....................................................................

Send your registration form with the receipt of the payment to: Technology Transfer S.r.l.

Piazza Cavour, 3 - 00193 Rome (Italy) Tel. +39-06-6832227 - Fax +39-06-6871102 info@technologytransfer.it www.technologytransfer.it

SPEAKER Max Dolgicer is an internationally recognized expert, Technical Director and Principal at International System Group, (ISG) Inc., a leading consulting firm that specializes in design, development and integration of largescale distributed applications using leading edge Middleware technologies. Mr. Dolgicer is a contributing editor for Application Development Trends magazine and recognized speaker, instructor and lecturer. Mr. Dolgicer has more than 29 years of management and technical experience in development and support of Business applications, software products and systems internals. Mr. Dolgicer’s academic background includes a Master in Computer Science from Technion, Israel Institute of Technology.