secure a web service

[dinger2121]

Hello,
I have a web service that I built using netbeans. I would like to know what the best methods of securing this web service would be.
There will only be 1 server accessing this service, so would I be able to set it up to only allow a connection from that particular IP?

Thanks for any thoughts.

carl
MCSD, MCTS:MOSS

 

[Diancecht]

Well, this has nothing to do with Java, but anyway.

Using the IP you won't be securing the WS but the connection. You have to decide where do you want to have your security, but if you want it at application level, you should take a look at the WS-Security standard

Cheers,
Dian

 

[TonHu]

I'm working on the same subject atm, and have found these invaluable resources:

http://java.sun.com/webservices/reference/tutorials/wsit/doc/index.html

http://java.sun.com/mailers/techtips/enterprise/2007/TechTips_March07.html#1

HTH

 

[dinger2121]

Thank you both for the input.
diancecht - yes, I was hoping to implement something at the application level. I understand that I would want to secure the connection, but I was hoping I could build something into the service that would handle authentication.....
I will check out the WS-security standard.

tonhu - thank you for the links - I will check them out.

carl
MCSD, MCTS:MOSS