Topics on Security

XML Security

• XML Security page
  By Christian Geuer-Pollmann, University of Siegen, Institute for Data Communications Systems. A great collection of XML Security related links.
• W3C Security Home - XML Security Specifications: Signature, Encryption, and Key Management
  XML Signature Working Group, XML Encryption Working Group, XML Key Management Working Group, XML Security Working Group.
• XML Encryption Syntax and Processing (XMLenc-core)
  W3C Recommendation, 2002-12-10.
• W3C XML Encryption Mailing List Archives
• XML and Encryption
  By Robin Cover, OASIS - The SGML/XML Cover Pages.
• Wikipedia: XML Signature
  From Wikipedia, the free encyclopedia.
• XML Signature
  IETF/W3C XML-DSig Working Group.
  IETF XML Digital Signatures (xmldsig) Charter (old).
• XML Signature Syntax and Processing (XMLDSig-core)
  W3C Recommendation, Second Edition, 2008-06-10.
  XML Signature Syntax and Processing Version 1.1, W3C Working Draft.
• XML Digital Signature profile of XACML v2.0 (PDF)
  OASIS Standard, 2005-02-01.
• XML Advanced Electronic Signatures (XAdES)
  W3C Note, 2003-02-20.
  XML Advanced Electronic Signatures (XAdES) v1.3.2: XML Schema (normative), XML DTD (informative).
  XML Advanced Electronic Signatures 1.3.2 (XAdES), TS 101 903, ETSI, 2006-03-07. Revision of ETSI TS-101-903 incorporating comments received after publication of version 1.2.2.
  XAdES v1.2.2 [PDF] (2004-04). ETSI TS 101 903 v1.1.1: XAdES v1.1.1 specification [PDF] (2002-02).
  Profiles of XML Advanced Electronic Signatures based on TS 101 903 (XAdES), TS 102 904, ESI, Version 1.1.1, 2007-02-16.
• XML Advanced Electronic Signatures (XAdES)
  W3C Note, 2003-02-20.
• RFC 4051 - Additional XML Security Uniform Resource Identifiers (URIs)
  By D. Eastlake 3rd, Motorola Laboratories, April 2005.
• Enabling XML security
  An Introduction to XML Encryption and XML Signature. By Murdoch Mactaggart, 2001-09-01, IBM developerWorks.
  XML signatures: Behind the curtain. Who can be trusted with authentication? By Larry Loeb, Secure Electronic Transactions, 2001-12-01.
  Secure XML messaging with JMS, Part 2: Using XSS4J to implement XML Security. Enhance your enterprise applications by integrating these technologies. By Bilal Siddiqui, WaxSys, 2006-02-21, IBM developerWorks.
  IBM XML Security Suite.
• Understanding XML Digital Signature
  By Rich Salz, DataPower Technology, July 2003. MSDN Library - Web Services Technical Articles.

XML Security Libraries

• Apache Santuario
  The Apache Santuario project is aimed at providing implementation of the primary security standards for XML: XML-Signature Syntax and Processing; XML Encryption Syntax and Processing.
  Two libraries are available, including mature Digital Signature and Encryption implementations: Apache XML Security for Java; Apache XML Security for C++.
• XML Security Library
  XML Security Library is a C library based on LibXML2. The library supports major XML security standards. XML Security Library is released under the MIT Licence.
• IAIK XML Signature Library (IXSIL)

Laws and Internet Security

• Internet Law Library
• Guide to Law Online
  By the U.S. Law Library of Congress (LoC).
  Copyright Resources.
• Direito na Internet [In Portuguese]
  By Sub Judice, Informativo Mensal do Escritório de Advocacia José de Castro Ferreira, Décio Freire & Associados, Brasil.
• Internet Legal [In Portuguese]
  Direito, Internet e novas tecnologias. By Omar Kaminski, advogado especializado em Direito da Informática, editor de Internet e Tecnologia da Revista Consultor Jurídico e responsável pelo site InternetLegal.

Java Security

• The Java Security Web Site

CGI Security

• CGI Security Tutorial by Michael Van Biesbrouck
• Safe CGI Programming, by Paul Phillips
  Paul's CGI security links