Web Services Authentication Still a Home-Grown Affair, Says Survey - InformationWeek
Software // Information Management
01:40 PM

Web Services Authentication Still a Home-Grown Affair, Says Survey

According to Evans Data Corporation, authentication remains the biggest problem for Web services security.

Evans Data Corporation reports in its Spring 2005 Web Services/SOA Development Survey that developers working on authentication methods for Web services are more likely to rely on their own custom-developed methods, rather than industry-standard methods like SSL or SOAP. Almost one in four developers (23%) say they have devised their own security mechanisms to protect Web services transactions, versus 22% using SSL, and 9% using SOAP headers. Additionally, the survey finds that, for a quarter of developers, authentication remains the largest problem in Web services security schemas.

Eight of ten companies (79%) say they encounter organizational headwinds when attempting to move their Web services efforts forward. About one out of five respondents (19%) also say they can't find enough IT talent versed in Web services development.

"We found that a majority of companies are not sharing their Web services with other business units across the enterprise," said Joe McKendrick, Evans Data's Web services/SOA analyst. "This is a result of not having enough IT talent with Web services skills, as well as management buy-in to the concept. Web services and SOA need skilled evangelists to help drive the adoption of the technology forward. This isn't happening yet."

Other findings from the June 2005 survey of more than 400 developers include:

  • While one of the main value propositions of Web services is sharing them across an enterprise, the survey has found that 55% of Web services are being shared with only one or no other business units within their companies. Six and a half percent are sharing Web services across more than 20 business units.
  • The majority of developers (68%) have either adopted a service-oriented architecture (SOA), or are in the process of developing an adoption plan for an SOA. But actual implementations are still few and far between.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of November 6, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll