Mr. Gullotta is the current Vice President of Technology at SOA Software. He has lead the development of enterprise software products for over ten years He is an expert in product development, distributed environments, architecting scalable software applications and systems, and Web services application development.  At SOA Software, he spearheads product development and represents the company in the standards community. He is currently a member of the WS-Secure Exchange and WS-Trust OASIS technical committees. Prior to joining SOA Software, he worked at IBM, where he lead the development of the Tivoli Identity Manager product and was a key contributor to the strategic direction of the Tivoli Security portfolio.

Presentations
IT Governance and SOA
Service-Oriented Architecture stretches current definitions of IT Governance, exposing applications to new groups of users and integration potential, including those outside the firewall. This presentation will examine IT Governance issues that arise with SOA, and best practices for solving them. It will include a comprehensive discussion of the technology and standards that are evolving to meet these challenges, and provides real examples of solutions that customers have deployed in this arena.

SOA Infrastructure - The Only Way to Secure Web Services
As service orientation becomes the norm in enterprise IT, the need for effective security becomes increasingly urgent. The challenge to delivering true SOA "defense in depth" has been the scattershot, project-by-project approach to security taken by even some of the largest SOA adopters. What is needed for robust SOA security is an approach that encompasses all the vulnerabilities and risks that this otherwise promising technology provides. In this presentation, Roberto Medrano, a respected security industry veteran and EVP of SOA Software, will discuss SOA Infrastructure, the complete set of tools, policies, and practices that assure a thorough but flexible SOA risk mitigation framework. SOA Infrastructure is the totality of Web services security, quality of service, provisioning, policy definition and enforcement of Web services in an SOA. Only a comprehensive SOA Infrastructure approach can assure integrity, availability and confidentially of Web services in an SOA.

Specifically, he will discuss:

• Security risks in an SOA, including threats and vulnerabilities
• Deficiencies in current approaches
• SOA Infrastructure overview
• SOA Infrastructure as a the optimal security framework for SOA
• Implementation scenarios

return to program