M-209 cipher machine.

Application Security and
Authentication / Authorization Protocols


Representational State Transfer Simple Object Access Protocol
Uses simple HTTP Uses SOAP envelope and then HTTP or FTP or SMTP to transfer the data
Supports many formats: JSON (JavaScript Object Notation), XML, YAML (Yet Another Multicolumn Layout) XML only
Encrypts with SSL / HTTPS Message-level cryptography
Good performance and scaling, uses caching Slower performance, scaling is complex, caching is not possible
Widely used Used where REST is not possible, provides WS-* features (Web Service standards: WS-Addressing, WS-Policy, WS-Security, WS-Federation, etc)

Secure Operations Phase

Federated identity management

The pre-Contents opening of their Wikipedia pages seem to contain most of what you need to know.

Application virtualization — useful for sandboxing