[security-jc] latest forum program

["Karl F. Best" <karl.best@oasis-open.org>]

Forum on Security Standards for Web Services
--------------------------------------------

Forum on Security Standards for Web Services
Co-sponsored by OASIS and W3C
Program Chairs: Karl Best, OASIS; Janet Daly, W3C

For Web services to emerge beyond the brochure, customers will need to
see an open architectural model that works - and that includes a
standards-based security framework. Standards organizations provide
the open, vendor-neutral environment necessary to resolve critical,
often sensitive issues related to security. The Forum on Security
Standards for Web Services is designed to provide an overview of the
Web foundation work currently being accomplished at W3C, including
XML-SIG, XKMS, Xenc, its model for Web Services Architecture and the
security segment; and the set of security-related technologies at
OASIS, including SAML, WS-Security, and standards for access control,
provisioning, biometrics and digital rights. Attendees will gain
greater understanding of the relationship between these specifications
and receive insights on future work, connects, disconnects, overlap
and synchronicity.

9:00-9:30  Welcome by Program Chairs and by OASIS and W3C management:
- Janet Daly, W3C
- Karl Best, OASIS
- Steve Bratt, W3C COO
- Patrick Gannon, OASIS CEO

9:30-10:15 Technical plenary. Why are security standards necessary for
web services. How do the pieces fit together?
- Phillip Hallam-Baker, Verisign

10:15-10:30 break

10:30-12:30 Use cases and requirements. Presentations from various
industries who use security standards for web services.

chair: Karl Best, OASIS

- Publishing industry: Chet Ensign, Lexis/Nexis
- Manufacturing/Aerospace industry: Steve Whitlock, Boeing
- Financial industry: Michael Versace and Kevin Cronin, Niteo Partners
- Healthcare industry: TBD
- Government: Kim A. Johnson, U.S. OMB

12:30-1:30 lunch

1:30-3:30 Overview of the security standards.

chair: Janet Daly, W3C

- XML Digital Signature, XML Encrytion: Joseph Reagle, W3C
- WS Security: Kelvin Lawrence, IBM, and Chris Kaler, Microsoft
- SAML, XCBF, SPML: Prateek Mishra, Netegrity
- IETF SSL, BEEP, FASL, Kerberos: Scott Bradner, Harvard
- XKMS: Philip Hallam-Baker, Verisign
- XACML, Rights Language: Hal Lockhart, Entegrity

3:30-3:45 break

3:45-4:30 Expert panel. A response to the use cases/requirements and
the specifications. Do they match? What's missing?

moderator: Eve Maler, Sun Microsystems

- Mary Ellen Zurko, Iris Group
- Jamie Lewis, Burton Group
- Paul Madsen, Liberty Alliance
- Chris Kaler, Passport
- Joseph Reagle, W3C
- Hal Lockhart, OASIS

4:30-5:00 Audience reaction/feedback

5:00-5:15 Closing statements from conference sponsors.


</karl>
=================================================================
Karl F. Best
OASIS - Director, Technical Operations
+1 978.667.5115 x206
karl.best@oasis-open.org  http://www.oasis-open.org