Microsoft Research in Cambridge have released the WSE Policy Advisor for Microsoft Web Services Enhancements (WSE) 2.0. The Policy Advisor is an an unsupported tool that acts as a security diagnosis tool for WSE2 policy files (think of it as an FxCop for web service security policy files). It analyses the policy file for common security vulnerabilities, provides a description on the risk and remedial advice. It can be launched as a stand alone application or from the policy tab of the WSE Settings Visual Studio add in. If you are intersted in WSE 2.0 and Policy then download the Policy Advisor and run it against the sample files that ship with WSE 2.0 and send the research team feedback.
Very nice. We need more tools like this that facilitate authoring and analyzing service contracts, especially during design and development.
Posted
Feb 17 2005, 06:47 PM
by
Aaron Skonnard