<<< Previous speaker next speaker >>>

Ben Alex, SpringSource

 Ben  Alex Ben Alex is a respected technologist, entrepreneur and speaker. Ben has been working professionally in software since 1995. The software project Ben is most widely known for is Spring Security, which he founded in 2003 and continues to lead at SpringSource. Spring Security is a popular, open-source security framework that is used in numerous government, banking and military installations. Whilst written in Java, the success of Spring Security has seen its architecture ported to other platforms such as Microsoft .NET and Python. Ben's career history also includes other accomplishments in software development and business. Most recently, Ben led the establishment and exponential growth of SpringSource's operations in Asia-Pacific. Before that he founded and grew a successful Australian software company, Acegi Technology Pty Limited. In his spare time, Ben has also been a director and advisor to businesses in industries as diverse as business services, intellectual property licensing and ecommerce. In recent years Ben has presented at technology conferences including The Spring Experience (2005, 2006, and 2007), SpringOne (2005 and 2006) , JavaOne (2008) and The Server Side Java Symposium (2007 and 2008). Ben is also a regular guest presenter at user groups across the world, with recent appearances in Sydney, Melbourne, Brisbane, Canberra, Perth, Singapore, Wellington, Auckland and Stockholm. He also authored the security chapter of the Wiley book, "Professional J2EE Development with Spring Framework."

Presentation: "Addressing Tomorrow's Security Requirements in Enterprise"

Time: Monday 10:20 - 11:05

Location: Bayside 203

Abstract: The enterprise application security landscape is rapidly shifting. Today?s enterprise application security requirements increasingly reflect an interconnected world of service-oriented architecture (SOA); web services; component-based web frameworks; and sophisticated rich client types, including Web 2.0. Beyond these technology evolutions, new business requirements are emerging, including IP protection, single sign-on, federated identity, and robust nonrepudiation models. This session presents practical solutions for addressing today?s complex enterprise security requirements. It takes attendees on a step-by-step journey that starts with the simple security requirements of a login form with web tier authorization and grows to include each of the requirements specified above. This is an intensely demonstration-oriented session. It gives you practical, useful architectural advice and implementation tips, whether you are building a Web 2.0 Google Web Toolkit (GWT) application, web services endpoint, major batch application, or perhaps all three at once. The session also introduces and demonstrates how to implement important security standards, including Java? Authentication and Authorization Service (JAAS), WS-Security (WSS), and RFC-defined Basic and Digest authentication. Attendees will also learn how to use JSR 250 annotations to provide objects with flexible, portable, and powerful authorization capabilities. The demonstrations feature Spring Security, an open-source security framework that builds upon the standards mentioned above and is used in numerous banking, government, and military installations.

Presentation: "Enterprise Systems panel"

Time: Monday 16:30 - 17:15

Location: Bayside 204