| CARVIEW |
Select Language
HTTP/2 200
date: Thu, 16 Oct 2025 08:06:58 GMT
content-type: application/vnd.ms-powerpoint; qs=0.001
content-length: 134144
cf-ray: 98f60f4cf9fbc1a6-BLR
last-modified: Tue, 21 Jun 2005 23:01:23 GMT
etag: "20c00-3fa156e5d56c0"
cache-control: max-age=21600
expires: Thu, 16 Oct 2025 14:06:57 GMT
x-backend: www-mirrors
x-request-id: 98f60f4cf9fbc1a6
strict-transport-security: max-age=15552000; includeSubdomains; preload
content-security-policy: frame-ancestors 'self' https://cms.w3.org/ https://cms-dev.w3.org/; upgrade-insecure-requests
cf-cache-status: BYPASS
accept-ranges: bytes
set-cookie: __cf_bm=KpRVNRnjWMnIJsJPL0KRH2nlLL5EAwYugf92mO1Rkgc-1760602018-1.0.1.1-0r9CjHOVJh8tylBQwJuaY2N5oaWp55uylRIKQp3gl1sd.i77SRvCgPB6p7UDZBKClxIF0m7J0nWhxGNcCsot_j4SCaLp7dM.yZvDezqVIwM; path=/; expires=Thu, 16-Oct-25 08:36:58 GMT; domain=.w3.org; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
??ࡱ? > ?? ? ? ???? ? ? ? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? n ?? ?^?]??n?_ ?R?????PNG
IHDR ? ( XxpN sRGB ?? ? pHYs ? ??5? hIDATx^?[ |U??Jߝ?t?#!! ?r ??ʮ.???3:???ή?fwf? `???????9\????????ډ?:????t??n????]?
???????'/X?ޓ?Q??v?y?z}??.??????nl,???
$??C??1? ???? ???נ???|????>#Cww?Aó? ;??Yա?n?u?PÎ?CdR?݁-'?yW?j!/??1҇RWvR??_?0)V#??[?/? K?? {E?Q?bҫhI0jhI6i?????t?c?P?-Z??5?{???Zm?vUW?q4C? }??5?cp?$i??hp????)??:??5??5??:+??a???l?⯪?r?? ) ?TT"??H???Q??x???{?ƪ???i???Ujr7 ?d?i? ? ,?v??8 ? ~?pImǒ9
q?)de U?N??#? ???zV^ ?4?ݩ?9??=d'?h?ȏ???M?+M? ?`s3????n?J???? '%V?^|('7?_Bhe4K?DvX?X]?#??9 \????⤔_ML??o????a?C/Bs>??[ӍV???]08ls???Ff??Z??h?*< ?a?꧳
*ܠ < [?m??2&?2ȁ??䭸???uj?? D??? ???}? ???l???v??$}??\?
?????va3|??????=?-??ֽW??5?٢?٣#8a? l??y|??X4t??X?c??]?̓?&?DØ???7Za?45??aF:ڏ?;??ۦV?? M???ta;?m??Ƃ-W???ewI??Ԝ????H?C?ŋ;?.?6???V۫???4Y??z(/.???>*???^??|???j?m? gk>;S}?Z[??7?tj%6??$~xh[?ҽ?\??u???B??4?0Ӥ?7:???Y??BM??ֳuG??k;zB?7$????=v??_wq???????v??yK?ǏO????5-}k???VM???w&Ϥ>?$;"??ʙ?_ ????/?3?
??/?}QՍg????34?b??7???6??'O?I|sF??????+?????ק?
? ?? ????jTP???
Ɔ?? -? !??oKz??T???Z?*?v??l}?\???I? ??Y?P>?c?? q????` ·???XEKo?l[3 ?,?cK?????;/4w?x3@???mxِlм?l?#Ssʍ]??
??C??F?????˧??? v???B?mgk???B???H?:?? ??????y??c?????3?!y?4??8?????e??V0?j?bJ?j,?
?(??v?gi?Q r?M 3y&ա?٩???/^?sf??? ?U??"?0+V???:???z??xĪ?? ????p2
??fQ0?i^? 3c? R????w?AE?pa? ??@w?? ?.???@\??u? ?j??51??U?v?嶒??v???;?WM?1??!%?i)p-????????t?'g??sr??50oz??܉??E????$??????)?????ͧ?~ Xxd????T)??O???Mi??}e?^ ???????/u쫱?r??b??UZ?1~ y*? ???? ??),??IBԪpL?v?"ܑ?[??p???O?7????yUcv88X???m? ??"?uoO??0 ??>?|?B;?u?? U??|??,?5Y?ps?T?J??Y???l??8?mZ#?R}GWg?{?
+?=7?b^Rn?A?)???/??
?tRt???@?j?S3QmbV?$?+t???s??q?-???CȀ?6?͎Cv4J[?
???JK}?????1??a?E)Z???4?????pK? j?.Χ?%5B???ՏG\?????x????t???
?Aе?w?.??!w?܄?
?`??g?:8A'?,?w??< ??d??=B?d?'?&Ū}??1?????#t
????)??Bg?zt'??/\R??ߕv?k7????????c??\j??`?? ?4P??A?T?? ??#??M?̑:˴???±?m?`???W?????K?=Y"?r?Ko??g?Ì? j?.{? Ӌn ???fI H??7??W ! ??K
?3?C?? WM??????W?%:???3?CCh ???Kc
fH?H?4?U?HХ$ꆤƢ?dG 6??????r{^??ѩ(?n??fY]?_??c?
c??'6???dׁ?D?ݡ?%G.?O??x x??^??|??l?Х7?ގٌ?HY?a?.??????{z#????& >R Vū-???? ??;??Y?.????N?????4D
?B1Sv?Q(p??c?U??
?"??n?4)??wb?!B????SK??"{???q&F?s?Μ??o'*?,,??/?? ? ??
?RΜ( ?o????Ӣ'X??Շ??S4??v??????G ????N izrL?8????0S0?;f<̢??????????
;?8&%?(j0?? 7? o?$y??!?f!!?????=?Ec???..???r?[$M8??
E8t???OK7 n$gܺ?????o?#xi????????W#???? a??
& f??
? ?Z?CV????#??^?#u?(?l`|f??3??T"x?D????????兛??L? ??X?s <$????d?P?F??(?? _?w~|?M(??+??n}rVoM????c??X_X\?
???;??繣??;*?]7)?wK?? 3xK?__??$?O??!?????x??`_??@?N?w?}???$p~Ӻz0"?X?Y q??@???͂3$#6 ?$??Uc?^??~}?%ؼ"?NB??t#] '?e?v
'??)???<??????rI??ӆ??/K6]?ؿ̱ 3???`???@?F??i?>ޫl??r?&c?V?Zq?.?z~??c?srۜ????.I(l??[6=>#?w????gz???b????Y;W???5??.d?? ???:%??.$?Q? ?_?k?? ???A?s?'WKZ??".y?? jP?0?M0?n|v\?d?,E ?/?!???"w?
???v?/0??????H?9ƹzr?
H? +???5?oA? 5????.b?r40}~F?? A??tIԯ[>??{?V ??????3??]?J>M?i?N???&?G???g???b?X?????[c???????Z?ԍRQ?U?h.???M?????N?3W?,*M[??Ű?|? ??6S?? *????r?5ڄ&?ѳ??ܸ???
????Zov?[%S???ijN?+?!Ϙm$???v??BN??????[??LK??`?8? nP?§??m.??????#???u?
?r????q?3?p?g??x???g,?mŇx?O??J??'|~J?'???X)F??y?n?i?"f鸄?
?M?>1;!T???0M??^?F??S?4??E? }??"g?????? ??m??s?s?Y?b7?$?ҁ˥???El a`$?H?i?/? ?If&?>D#?|Z|???R?
$? ?
??X9?ff?Cg??3G???,?`)YE??ah
???c?????ԙ><5?>?g{];?s?h?Ox Xt??ޔ?!??9U???
a? ??c??|K????#?{/"???#?'??٦}? q//\?rb?'?? p??DŽr??3` 裸?t??.?Ç??*vވ?0J?˶??o/41?G z*u!??J?V)F?? %?wpQ?/? ?X9*?{F???{?ɀq???>`?v?@?r ?'? ;???r??r *?7?????Qq PvG;?? ????????@T?????n,??~c? ?}@9?ew??ˁ???X?G{ P????Jj?E' IEND?B`? n ?%7 %??%? ??{??\???PNG
IHDR
p?L? PLTE??????????????????????????????????????????????????????????????? 3f??????????????????????????????????????????fff????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 333??????P9x bKGD ? H cmPPJCmp0712 H s? 3?IDATx^? |T???'@HB?xf2KV??}GYE-D?,???'?V ?A??Q+V?Emk?Rp)Db?UD[?ն?t1Q[??g???{'??Ζ? s??8y???ﻝs˗?C̀? X?|????"?o
??b ? (/?Q^B1???b ?P?#?銇'+$?a?#?? Ѥ>̛??;?'? $N??f???V9?g)$?Z?3???8#?~6??A??0????ټ?!Ǧ?9E???D??xH{!?(ޞ????i?B"??????????P^By??QWy??#4fU3???.????QT??C?5?Uk??"?Y?!^???4*H??!s??"?[?H??Z?Q@?E?,$bP?D$Z?? $ƕX?آ?D??YHĠ??H?X m$JJ?#le?#?k
?)h??G??f??!C?6??H?? ??4 ?룈Da?u??Z????ٛ????8A??91????F,2?
2? ?D? g?<h???E((??*?RB?i?0????vB?擑??F???d???&ÅA??P6~???H??x?ЗI?2a??L9X&`:-M?v|????l?? E??x%|?]?y??1???Wz?_i]?@?
?˫K}^?u?? ???u?˯????N???q,2?
4?& R3 Rq??pa3?,????4?EoZ?Ky?????? H5#f? ?P^&Č5xp.3?L?Z?D?????ThHX[3?D??"k??21a^) ?h?c?;N~?bQ?(ޝ$???P?fCB?{s?????H?6֕?$Rw?Lב???}w?#? H?.? .??? ??? ! ?$?8d?-?Ck??!?ɈM????"&?e+?I?2?#X&??e????&??ފ /$J????p?S? ??ތ??9?yb? ?Xd?$?"???e?D?\?????[*C ?? ĺ8i?????E??? ?Mxti?H?
??.Z????#! ?~??"P>Y ?@B?^??A?>V ????L?????2? ?ii?ze?M6{?ß?$??q?N???eg4b* ???le1 D.??c
nA?9?ë,˦????*?#??rk???}??i42???. Z^???u[Ox?@!???䈩(??ėX????? ??@
کb?l ?qr??ɡ?)?cƊ|* #˃? ?G?3?1???h??BQ? &h???za?"?{???r'?IL?+?RFږ&??j????/??M?,?+Ǐ 7?\ r?Ǖ???c?c7v?g?\G? ?g˺s:o?????O$??2?2)???u??G?K????\G?t뺔???$C?V?7PrLeA??% (???5dd͡?pr?b ?tA& ?X??*???C??ߜ ????qh
1cǀٳ9?C?2?x?-LD5??M?Oh@??*=-?\?s?p?o J??7?t]?Ӄ ??Mx???8͞
A3??Q?????????S)MF?A??a2v -????fr????e?4ey??,gNn~Cu _a6 Č??|??f?Ⱥ G? N??[S銐9? ??W??"? DzM /?K?gώ?I˹??ϴ
9?V?E̠j2???p??j11z vf?YPr?$??A?]oag?W??#??P?x*?M&?? ?????????`*????2?̘*?s??e??LX'L?,?5Z& a?kn??/?v?+;? ?F?M|?_????D)?a?328?? _(r???E?k??/?m?p????M?H?"?.w?_?b???.e?y??Y??r8?X?E?c?;?K?1??^H?[?\D?th?? 4? 6?1BZ???H?0???N#?d?!q"} ?p
??b?&2?J$ ? { ?D ,?i?]??2??? Xoir?LhH?I$X???1?f? Ie???? ???? ???h.?)? ?U???(X??a???HL?H???ٔg ????????hYա*@D????ʺD ?z&?x?Z?![?H??lѓ?
%8s?[94?Gȭ)?????[p ???T??m?Ed?E???z+z?=?ֺĺĺT?????U?????L??@???t???y?x???TP??6@????0??щ???|NSy*?j?\O0@???T??LZ&KSv?\? |?u?0??92k?????v??IВl[2?5u?+?U?D??ܘQ???' ?6??K??E݉"?u??? N???????? 7(?:. 0P????
J?T?-??Ru zgc؇????Xf?^?*"??4D¤e?@$??q?Dyf? \f s??? 4м? ???}? 6c MfT??3????5?)?e?=????Lo?<^?@ ~.??o?a?U\????@???pCA?}p9o?n8? !?
4?`[,,???????-=DIL%%?F?,\DM
L?!&-??)??!SK???J Ľ:ܩ??nUn???h?+??G ??D?6!R???OR??ͬ=??eC/Ѣ??9{?]????? &Čn?}?????Q?????&?????t=n ?1?]?x\????!??!????k??d??wz9Z?`?#?c??
?"??????EP?}? ?{Qw???
???\?"?2??$^?tQ?/??]&KoMpr?7{????f????H?؋2c?$?????Aσ??+??U$?UU?J)"C?b???"^~??! ?%{щ??.?w???\nL?[xr?^* HVa??? A?W?? ?J???.k1???? _1F?^?>?y&[g??#!5?\ ? ?`R??m?B)u?d $Z? ? bɞ a?,H????U?g??uj?ZL??<? ??&? ?b???y[?Qp??U?\?"?Qxrm?????X ?? ????u?? ~??;e'=??ܪlp?@?H? /???nQS#?ᘁWJ??O 8Э?u??Ɇ^B? ????9o??????X??_?WU?]? _??HN.???B"???^_@+???Ɯr?#=?di* ?'pI????`?$?D?5?? ???`3? ????`_?
?m????Ȑ??)2'??\???5c$? $?)?kx ? ???.?]F?1#???1.???F?D?????cƛ??tB?&?*?E"]&r?D9Q?)|??ҤQ?t??H?ө?A?$p D?,3P='???x?ϐ?$??E?9???9?3u ??L?J???o??NX=?ã{???h?5?V[??$??ʤ???G??,\1???.
?n 5? ??? ??3w??][?LîC?>????D?#5??????^?k??03s)??F$?????y?Hx??3??5L??? ?Sn?bz??{9]?IK?????g[
?/h??tg?X?> Az?E??? F(;Ir?H!?#??g?|@65??M<@???л??F?4?G??>H??L?D%?(??V??"?8? ?T/8?@??5߽?l???? sk
?)n^?Y?Z?jOqV? ??痢??{^???Hxt[v3P&B??0$?Хk1?wRj9?R?)?t??zM??@y????7?γ}-?:??D??l??Ƃ?y????DV3Y???싄9?dir?XQѹK??L??~H?]C???????gdx7C;!?Ƞ??C$M??F?ҧ? ????.?:???5?Hx?J??!? d'Is?uZF?????d ??O?3??^?fTң???YP怩 .?x?A?gĖ ??T}????6S??>H??L?\? ?? ?i?h?M5c?\?*lU?g?!Cv?>???r?3??E<
???i????C????SC$?t?u9??? ]^@????KI?R: (?&???Lx????C?\?V&JA??@,?@???rcAy???d?"????? ?d $LZ&?s?u~???B?P+??q? ??A?H?2?>??F$?d?Ek?V? ?cơ?{???????T ^??????>hܥ?R?'???y
????
???Lx??ooi. 4??0B8?O?U-?:?<#??-(??2¶?샄I?+?f ?? ????*??r?@???s?Ep)3s?җ9?@̨??H?7??O;?Et9j???.?.{x??ѫ?H??>?R??ʗy?)?mF?O?3???r-7?YPw? a??7 ?? ???*Ѽf??Y?eV?.g"?&UP+?
???kH7Y*?2,?}?0i??B?w??"??:|?'g??Ep??:?n?"??<??ʛ???v??????G;u2 &?z&<$^??)$?ZV)? ???????C,e ?"?ʴ???: ?|
?Y%Bx??? z ?4C?k£*??b?=?吱e ?1CA??5{???Q?/?X ?̐?J??T?(>?C!???????N?U?˿~??o??UN+?! ?:x???H?????A?$??B??` ??{3?Oxy?????E???7??qԝ?C?Ep??zG???0I׃D? ? a??? ?ȯ??|?L@?L=*?.<$*y3@?$?ˌ?'y7C֝?!??????d!?OH"??Yx??????z!o??H?c?8?^?C? #?^?Q?pN??-v?Qx?i7????#?3u9???ވв?o0 3?????H???A"?}?0?z-???@`[Lnx"??6???%L?? w?>H?d}XH?? ???xA?*???G"?E\~????C ??.?ރ???=z@?$]q'胄I?s.?)6t? 8???s?ނ?Л?o??s?3?՝?
A?{???C????K??t=Hĝ?&Y V_???? ?Z q?[????]`??T?._??D?_02?<}?vx??? 7F?$]q'胄Iև?ĵZ'B?8W?2v???!?? l?#?@??wpR?-I?͜E ??7F?$]q'胄Iև????`"&?1:4?o?ct8y}.???"?)[?Z?@lg z,$d?!]?? ?gd 'r{K?nɤRz?2??? N"~?32?_CȐD???? op???`???[/;?|??=?I? $?N? ?? ? {y$?o?U~? O???.I?o!dp̐@pZ?뗽.{????I? $?N? ?? .3м??T?O9????C2??вʋ?` ~Ν)N*٫?^v?$??K???A"?}?0????@?Z?U?v??C???Lw??Wy r.,$<m? p??]??[?????C ?,$Pw~?Gd???~!??N^??{????J ?{??? z?9DP/a?????A?$??B?܉x 1??7?????? ???Զ?~??_?V^??#x ?t=Hĝ?&Y pr7?'???~?N&?=??z????:㗿Dk??AN/M?? w?>H?d}XH???QTh^sk??k??>x?f!???C?y?i%RJ??|??`?I? $?N? ????G_???_}?????b?ּf!? .2?????1#???a,3t???7A_$̱>,$|? ?m?y?#???n?R??c? w?>H?d}8H| D?wG ?S???$??*?????F¬eRH`;?)$???g?
?D???v}? 8??G?u?3??D?????aS^? ??|?oxπBB??7
??BB1|??P?(/?P^B1? ???t?Ó??٨??h????
?xX?lTHD4]??d?D?5`I???i? j$V&]??ba?+$? $J?}m??2j??}7??Y???gڏD??
?? 1?????+ADނi b=|DUzM]F??_\!q? QTl?????9:g? ?A5@Dy???@\!q? QRZ??1b?s?쇦 Ӣ?m??(Om'?+$?$??lC?Y:]oe\???3KT?U۞e"j"AD???=???????'??x???ʦU??x ??8;?()j???t?d?~ ???#?????ؔ?QR???#.?=Э?Hh?X?f??a??A?ϧ?J???
?? ??qCl?^1>bQ?Lī?P%UmLy.#???T??H?D
-zH!C??FF?O?S?"? ??]??x$??8?H??O??~|Ē??@?U??<5?@?䊶{?qV?@R??ѳD?RH?S`q??B?h??6[??̜?8{U?.p?Q???9?@#??hDt???QhU.??9(m?8?8Yꉓ? )N?? ????/탞%N?q??Pk?#??"?{1??j?? ???F??HxL??(%?
??a !?.?5X??S?E??X\!?qHx灥?4g???Џ8???W ;???2Δ>b?D??K????b??l?4~? q???W)?ۈ??B+(??B??h??E|g?0???n?/k??zA?S|?S??#>>?m?Y~?????%X?nϺ`?(????-8??|JX?
?CR)???.t??0m????W8?{?h?ˍ 5?Gte"???G$H?8')?Y9? ^???H?|i+Z\!ѱHh ~?m?XnY??si?i?J?H?Y? ?g? ?#@???q??????͛??v!??gd?Z\!ѡH0??o
?w\??& ?['!?"???ʩv"]??vy?=]?~??ot???{z ? ?g??r?? N???6?T?????:?}?8?WHt??e??2p??-?j????h2?K???D\}????"? ?????%g??Y???U[??ε?Y}J?nDB\!?qH??e k?-t?Y?P? TK/_Gith?WHt$??#^7??;?ϴ?ḁG????F>0??G?t??? ????=O??^???D)|??8I?A,? ?稑? ?
*??]
!???@$??#q?
D\?֒?Wm?? oq?????k?@<խ>??Ɵ ??8??k
?[???ґx@fy%-? _-????6Z?N??uk$J?A!? ?ĸb?d?xԀ??rW??o1s[?E??;]L|ď;u??ݿu?}?#N?G??Ds?i?
?C?k?~c?:v??Y????e?q??Fʵ?8f?????G`?????{?!?_>q???????
??B???:tg?W??͝??'??#R???Ӹ??????k??????=O?wz????H?)??? $
?????xI???LD}}"???#p?kt?? q??=????@?D?Tq?D? ??. :A??ޑ????{?M~??w]-?[??gى????? ?h????H?+???$??sf????2?7 xU ?K?xp??_?e?? ?Af?????????A?\q?DG ??:d2?08np?̖wT?ǻ?2??{u?>?|?k???O??"?o?&6??}D??a??B??(???????????c?>?z5p?G??kD ?[?????7?s???z?????H?.???_?????ɦj???QBk???????Qo/ ?{^????? ??jQWHH?M????0?=?:焗h????G?]?F?????Ʈ?B"v?.J#WHDibcWV!?k??+$?4??+???ݵ???Q??ؕUH???Ei?
?(Ml??*$bw??4r?D?&6ve??vQ?B"J??
??]?(?\!???]Y?D?]?F?????Ʈ?B"v?.J#WHDibcWV!?k???+H?{U|????? ?ü0?6?/??}
?p`%????y??H?m??3q?L?0? %e? ($̞ј?SH???m?B???y=?D?/??($̞ј?SH???m?B???y=?D?/??($̞ј?SH???m?B???y=?D?/??($̞ј?SH???m?B???y??????~k? IEND?B`? n ? ??Yk?*3?7y$ĕ??PNG
IHDR ? ( ??+ sRGB ?? ? pHYs ? ??5? ?PLTE
m? d? e?o?g? j?q???
?? ?? ?? ???? ?? ???????????? x?)~?7??2??!??%??+??7??0??W???>ʹؽd:L+?W?? ?l?w&aU< m?? o ?????mvG?i?ף?7?Љ?~0?v+1??c?????t8 ?=(???QN_?$]??????{?Gy??L[掕?ȫw? ?C??!?5?[H?iZ{???+?Ap?T L??A ??D?z:d???~?w?)?qIY??e???p?T ?ټH???? =???F_1?*??[ ?!:F?[=:@ z#m???L?bH??B?
c?V???X?zzƆ??{???? ?lnw??=d\ fQ??+r?c?????-??)z<??zTP,?G??Ph ^ ???X`?ס# ??? ?Dr?L????~0cE?Q=?^???ϙFS?R ?2???qX?Z??x~ ?"?߷??̇??蛢???4[fҗ?1?:Ƙ?=:??гђ`X?IP?8?=˚oT{=??.9B??mi??!P????q2z???L[9m?]??S=P??3??zt#???EtL?׳u5BG=a ?u?:t?"?P;
?Z ?y??|?????iig?#???1????tѤG s 1??ϼ?q#t??R=?c? ?? ???2??P????U??`?+3?S???2O??z?nDS? ^??Q??щ?.?à?????:?5?R?9^?LQM?Ƞ???W??O???=:?g????>?^???^??yN?47??#??Wx???<0?`????r}|1?(?? ??????q?M\?q?̲:ƍJI ]?????0y?յ?醩??=??@??l_n?%?}??v:?Q????x\???Ǖ??J??ۨJb????b)??? ?l?0???[F?^?2??E????????;~???e?^????Z?
5???
?>??6?܃p0??&o??K ???Bo???[?-? A???]v?Hq IEND?B`? n ?7 ;??w?& ???[??PNG
IHDR , ?ͨ sRGB ?? ? pHYs ? ??j?? 6?IDATx^? ? U???e?Qi?????4kA??5?I@??b?sd?
.?g ?3N?c????AO?t?a?.'???? a ?!A ????/??ͷ??????Z^U??nշ????zw???~wm??m? ? ? ?#0&?3?" ? e???H?H ?FXtJ$@$@?` H@??? ?? ? P6XH?H??l$?E?$@$@?
? ?( `?) ? ? e?u?H?H ?FXtJ$@$@?` H@??? ?? ? P6XH?H??l$???Ӗwd ?" ?bP6?? K{?C?(?>#&HK????\???8?S9???H?
%@?(???s??N?6*GyE??I???l$g???=???(??T???2 ?? P6rG,??????i???֪/R9r/F@$? ?V???$ H j?^?8??_?????u??Z?8X?H?*N???o????Pʡ]??%V?? F?a????f??? 4? e#???[6?3gΌ? ,X?@wSW!?~|?? ??>?0;FJ$Pe??|KǕ????FPÔ?rպ'??U?9sFX6?{?E]?f?? ???????k?N?2eݺu??}?? s?1rV????????+c?F?a?[?: ?L???3`'?????#?:Z?k?.ֆO69?A???﮻ ???K??1mڴ /??Ʋ?hѢ?%_623f
??I??QD??~???h???d??#=?08Z?ьp???8? gi-]?e?ܹbm̜1s?ϗϞ=?ƲaX?҅?1iҤM?6ŗ???,??1ȍ ??V ?3??, ??ѷ?5#~?!8,\?Zo????%??)??3f???Eg6?0-??d7? ??rJ???8ǵ6Z?S????F?ӽ; ??#f??b????w?UW????;?̙SckC?`I?gU??????F?a?S?+ dD??FF S??[?????8? ?y?y?;?:?＋????WΆ?????/_磧?gyhV????? ?<?!?#?D ?c??Fi??z?+;CO?????|?????k?????ؿh??7?q????p?Q ?˾?> h??J?p!G?#???6R?f!0 ?B??T?`-2Ў???{?02Ыq?i??ڵ?ꫯnB#?^?C?R4Ref?Ճq?@?(?#--@??a@.??bh??|????aÆN8 ]s?5????bۧ??m? ?#?J????.?He}I?E?o?Lh?? ?[ե??*շ!.?#LK??e?ˑT?(??N̙????aw?* C???? ?B P??K??W??c'?ڵ?? ???o
fr?m?ۖ;?V d;"???v??B??? F a??Q?@?(?#?D?A?2?h???v
5ð'? )Q???*?J?&??l$V?#MR?????5d????}Gt?鲃?:?&)i???f?????I???\ìJ?b:H ?F0 ?5p? *? ???Ogb|x??ƺ?k?b??r`b?:??-*?4W?(??]Z????F*?xed86?
?5???"?L????"?*???????[o?g90?E?? K???? e# 7?"?F???7o ?a(L?4?,??Q?????r?+??nUTX#U? A???W??z:?[5? #>???W??f???mK??3????U? ??U????l?B?V ??$?ڦ???K?$?z???\:-?? .pVi?wf?Ӱ????S?Z]?g?7i?B?7.TǸ???F?zW???Q6X?̲?ݝ?ѯ?u????mJ}?F?DHk???T5(Df?r!?7R??e#U.eP?@)?,&?*@ ????)S??[?.,9???TqV??@???l??*? ?H?#?X??2??f?{ rm??B??'?C}?? ?ʙx?1?Jb?z?[렇5RIF??*6RYW??\?}???.????~-??I?q?n?U s ?????[#??I? ?PDI@7VjLcꑇ?S?h??ά? P6X+jH??? 8?V
?U???+? ??|{A?36p???ϵ7?LyL?ۈ ?&gW\q??ŋmJq????mDO?GeL??ȣ?Qd2? e?
??)Q?P}q?NڷQJ??d?n:HԤE?V`߆^L?.????????N???:Q?U?R?TuW? ??0?k֬)?o?,?J?N??H?YY颚?\R-Ԩ?Iחn4?,qc??W?4¯&?8??4~j?T9c???? ???c???Ԇ ?jS??3ҐF??\x?J)S4RauBW*zzԴ>???%N?+K?*^`fim?? ?"?*?K??F,|5rD٨Qa2+$???)
F>????aG91?$P"ݞ?`?X??})?,???,iV#?Rʴc߆?j4?oc?
YՈ믿?ҍ?(YՁ
?S?OL??_Ǥ?R??l?;??'I?mdRJ?c?l̿? ? m??%????g???ãl䎘????A?r?b{ ? ?p?{gN?v??ϝ?Ξ)=??5? ??O2?
???/_?N??ѷ??????n??8?Z?
{?Z??h????/??ߡ7BuH??c̘1;w?|ϻ??
??x8??
W6?#b??A?HQs?jN@ g ??O?;????Y?`??????J?}???Qo??F\b$???(6??L?p?%?=?MYB?4???
I ????Ce??FʓI ??
??֓O8?? ?x? ????î
8G[?Һ?????F?U??? ԋ?????~?z?ڇ Z????'bZҷa??[?F??3sC$???Y?;?????M?6yrϤIo???q?o}???l9(??T?t?'&,K??Z???\0???????ju?B?6sعb L-d?C ?????? 8???!?-?dÕ??c???+??,???????_??7Hו
?b??j??3?V?`?F?5?? c?7??P??2?8?^4@݊~?[?C`$ ʣ???2??*!h?????]??.??cs?~????9???k1xK?,Z?䶥??z??y?N=?/`j?ǰkL? +_?[6?[n`h.??\???QN?ɂ??]?X?0Ò??$`?.$aQ???a^??g??ٿ?Y??????M?????۱}??w?a?v????2!?5E?????V??H)yױ???k?-F???v???S?^۷oߺ?E????߮?߆
O>???XӰw]??S o_???_????D?(? ?8?S9??O????ַ?s?T?FQ?аt???S(?ň?1bwX
n?ێOT;??c??&?in8?F??M???1?reMv?R6?+?=???(??T???@?i??_? |PŠ?? ?}????a???#|?F T?Szn??u?i?????/R9?
? s??? {??!??^??a??? )?W=D?W?}?8? 8??N{???g???P???,?#?,Ȱ?:???^?~??> ?#????$UMT???zz?? rxᐑq??ֆ?7n\7E\??I7|???j?O?O????Tn?.Z????j??f????W? c,?a???)?ԫh??!}??| ?
{? ??>T????K?%iD?=?n?$ ?? ?????ry?'?5&vF???΅?Ͱnk?r????cdތ?F?W?? (?????k?? df?C??dhiY۞?ق?竛?ۨ?o9ֆ??: ?CnU??رcE???$???¢?g?My?ϼP??28??j??????jF@Tbj,X?`ݺ???]?KgXm???g|?'?6~?ܥ采??G?p?????-?e?k??@?80v ?m?????G?:?mm?
??&/??V?>x??F?7? ,?h1$??в??iƘ1?84?c?G*?#W???????ZO0Z?ǻ?T??H,??!????ߴk??
?W?????K????|?I??F?j?{?8}?-A??i???k??????? S^nPЌ??;O???V ????r?#]?` ??6?Yt%b???d??i????UV#?;h
?q???{MUmh??S??.???Go???F)?!_i ??7u?k?Q??C???{ٲe
??[??q?8˅??g\ԌLDv?? .? S?0u?j?*4L?X??t??2?2ec??????x? ?J???!?T^??|?S??_????c,?y
_?N?.?'M? ??X??ʈ?N??n?5kօ^??}?!??ܹsaL|? ???I?r
??? ??w*?>4cڴiݤ??;?rt?~k@? ?P? ???V???ě??Z ?w?? W????l???_o??駟??Z??e?-l?qA# e???-??LLŽC3?L?"C?p`??????}ށI-{F?? ??" ? ???w? /?l?82N ͣ?W?n?I?=ܽ?10&`s øA?7fiHK=????k??8?[?~?k*???~??v?sϝT]?oƥ?·??*?
{?fL?܃>?0?Eڕ +}8㉜?S?}?]c??k?)rlUC?*\z?I#?RJ? kC:-?{?????U|???>???
2
PiFܢyJ4ϽQ????#=??i??g?=ڷ??R??????????!?22??#??|?'??:D?#}??O? ?cm?ܹ ?&L?:&d {?????????o??x ڦ ? ??͛?椓??3?|rq?Yw=???
?.??ϟ????KJJm???)??q?Z?iYh?E ;KQ
?g?d???ՖtY????RJ? ?رcr??'h??, ??-Q?g?y?O?v???z??x[??A?2?h`?& ????SY?Q?d&d????$37??"???"P?ص ;??h?n?ȵz7\??ˑ
?0?%?!/??^? ??"np?z?_z܆??[?'??*??Æ}?f?k??m?}??v?? ??????]?1????"??,?"K:??i?? y?? {?'?ذaó?>?iӦ?{???n????㥗^z??m8?x?;?lٲy???p $E???mc?ei?!ʁT?)߲:????.?EK? v??~h??T??kt_&lʄ ??Q?ޗ????:;B???l???9?V?t?M7?Ӎ?x?;???o?喯?zꩧ?6????/??? 8>묳b~?? M?6?ȍ?O?.>? ?}?mP 4I ??/??g? 3??)#?p? ??z???~???? ???q? k? ?T?25T30 ??????SO=u?g??Ia{iV??!???Hi1 ??H???k?2?rd#eb}?(q^???&lܸ??ì?k??V?k2?6?9???2?
?GM#P?l???z?S??[??Zg?? ?w?:????A)?u???_yT??F,M?20?$@q'zk???K????O??s??OoX0 ???ɶn?p??$/?/˂%??S[???DmV?D?XH?
%Ȇ???Nj?)⢗?0?Fh8
f?t%Ȇ2/?%?q?+?????a;?f?p NLg?ΐ ??"P?l?@?ݯj?>????ћ??ޜ/?????
k? ???cNI?????!??v?I?J?Y3:L
Ȇ?R??-{(??%! {???????o??K.???QP=H
d#??#?%Z?,?`??]??(? ??QN pGX????ci?.ʆ0? ?pxxؐ
1????O|???[ ?E \v?e??r?A?c?-%?FX?|z?+/?5K?H~?sΣ?>?Lj'r+??V???Ճ?[d????.?tܲ?7?f???=?A???c?w?C>???????.[z?7 :t??;?? è-??C??L?3M?Lu?ȭ:˖M;??^? ??????e??l=??Г?7?_??W??????? x?7??????? z?? y????=????? ?'?|r???6lxꩧ?~??g?y??g?ݸq?s?A?(?X????y?????^??\r? ?%??>??EbD?i???'D?F>\;????;9?%^Ʒ0U?I?z&?hz???*?Þn??1_???/?K?K???.]?nFO???e?t??\' Ie 1?W>?V??Oo?iBٰ?X?`????\??qF7???O?y??8y??Á??(eò?PHr
?? ?<)q??B0 ?$p蔘 8???>?u??F????? ?[a?(M?R?? hm?팆X?h5?s?mXS?? ?WR?z???T????mp?TI?P?h)*??Iѥ???h?eJ????RrM!?~??B?F~l2 Ԗ?_Hj?U-c2?VM?S??^
ÁKC??O??!?k?,h?x?C???H???W??Z?A0??nf??%ָ?@?_??-??T6Ur?s?` ?????l*`??l @kÆRM?Ѿd??̉?Θ ?H?@??шj`c?[#
??$ ??ʚB?F%y0 ??E ????J$P?FI?- ?M@?* 3* ?M?+??;??@????iƟ6Re ?A??u? ???=????u2?G??o??L??H? g ??$??ќ?fNI ?@?s??^'?u"?F
h?y?$P??%z???,???x+4^ ??M#???ɘ*F z? b
??뭪???S? 579??ꖽ?!? \?H???v^]?LY?iY2ywT9?P6?"[?p??5???UL??1o?V?EP6*]??}?4?G???p?w\i:L\T3???֫?j????c`?[;?(??yT???)S$ir?n??*큟??'??Ra?H?J&@k?m?9?l??0?'?Z?lԤ8U?A|
k?? BM?1$@Ip?xZtKVP]_???$p=?? B? ?ˈB??{?"?
m?[r#?'ȍ?ѹձ?,E???L??,Q?\np??H???
!?Aޅ`.(?FA?
T?@??????q|EgS!?\?Jlrb(M.}潹bN?\?@QK1?;f??-rNٰ???F??@??Sϳ? c%?#?ba?#????^??R??A ?d?nR9??7|??U?B?3?*,^KQ7'ٔ??5sJ$@`#U ? 4? e?9e͜? ?@(@d$@$? ???5sJ$@?ld ?A? ?@sP6?S??) ? d@???DA$@?!@?hNY3?$@$??F ? 4? e?9e͜? ?@(@d$@$? ???5sJ$@?ld ?A? ?@sP6?S??) ? d@???DA$@?!@?hNY3?$@$??F ? 4? e?9e͜? ?@(@d$@$? ???5sJ$@?ld ?A? ?@sP6?S??) ? d@???DA$@?!@?hNY3?$@$??F ? 4? e?9e͜? ?@(@d$@$? ???5sJ$@?ld ?A? ?@sP6?S??) ? d@???DA$@?!@?hNY3?$@$??F ? 4? e?9e͜? ?@(@d$@$? ???5sJ$@h?ر#?` dD?MozSF!1 ?\???+% ???lԵd?/ ȅ e#? ?H??J??Qגe?H?H ??\?2P ?+?F]K??" ?\$??wzG. a?$@$@6H&??滶L?8ц?1?$@$@?H,? ??s?ʑ}Q0D ??@r???8{??mT??i$ ?? $??= W9n?rd] ?H?*O tM??????lq? ?o?u??hU? M?x??
?~!??\=? (??T??K 귆K?Q???I?{??H|4??y ?x??DJA? ??Y????[?5??c(?@???x??8???e?l?i??l?|????o???Z???? ?Mcs?:??R??aċr?n?˸??P?gQIK` ?y?P??]?8??QX"
?? Z?Q?V??? ?@m$???:?P?EYzT?c?\?Sa|*??o????0?X??m?? ?k?H???Z?N??.;:??Q> t,??k?#(?@?l ??7F ??-????,Y??????*?e9??I???Ō`
gF?OL?? @ QXj?{}Ǧ??,D ?1?C??ib
?? F X6 ??S?qN??[?wZ?8???W ?~??6?0?T?uObͨ?J?MSX?t?ȊDv? ? XG ?ڀr?Z?ˍ??ҥw??7{Zxkub?P??jp?4?t?T?T/nt?Q`I?b$??(?^?cfS?,a=@? ?Hd@?#?K(j?u_ &?H ?@?Maw?xM??k??7O?"?o[??? D? \V?8?]?'?I?S?5????? ?@N????????ȩ8, ? T?@b?h=Kͨz?2}$@$? ?}?E̐I ? ?6X1H??[??G$@$?+?F?x8 ? ԍ e?n%??? ?@?(??e?$@$P7????(?C$@??l䊗?? ?@????v????? ? ?F??Fnh0 ? ԑ e???? :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z s e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?? Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?L C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s d i f f i c u l t ? ' ' ?,
? Z ? ? ? Validating Canonical XML ? ?8 Canonical form of a valid xml instance should be valid
? 8 9 ? 0 ?
? ? Views or Aspects ? ?? Support for different aspects on the same XML Schema
Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Instead of adding more attributes to XSD:Schema, separate files bundled along with XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. Z ? Z ? ?P ?
? 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ?? ? ` ? ??? ??? ??? 33? ?? ?? ` ? ??? ??? ??S ??f ?3 ?f ` ? ??? ??? ??? ??? 33? ?g? ` ? ??? ??? ??? ??? f? ? ` ? ??? www ??? 3?? ?PP ?? ` ? ?? ??? ZX ??? db mo? ?? ? ` ? ? ??? \ ?ғ ?3 ?y` ??? Ӣ ` ? ? ??? 3f ??? 3f? ? f?? ?? ` ? ??? 3f? ??? 3? F?K f?? ?? ` ? hk] ??? www ??? ??? ??? ??f ?ܹ ` ? ff? ??? >>\ ??? `Y{ ff? ??? ??? ` ? R>& ??? - ??? ?{p ?_/ ̴ ??? ?> ??? " d ? d @ ??? ??????, ?| ??? " d ? d ? @ ??? ?????? ? ? ? " ?@ ? ?` ? ? ? ?n ??? " d ? d @ ??? ?????? @@ `` ?? P ?R @ ` ? ` ? p ?> ? ?> ? ?? ? ?f ?( ?
? ??
?
? ?6 ? XQ? ? ? ? ? ? ? ? ? `} ? ? ?
?T ? ? Click to edit Master title style ? ! ?
! ?
?
? ?0 ? 0|? ? ? ? ? ? ? ? ` ? ? ?
? ? ?R Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level ? !
?
S ?
?
? ?0 ? ?{? ? ? ? ? ? ? ^ `? ? ? ?
?> ? ? * ? ? ?
?
? ?0 ? Ԍ? ? ? ? ? ? ? ^??? ? ? ?
?@ ? ? * ? ? ?
?
? ?0 ? Г? ? ? ? ? ? ? ^ `? ? ? ?
?@ ? ? * ? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. .v???m ? D e f a u l t D e s i g n ?? ? ?
0 z ?r ` ? ?
?( ?
? ??
?
? ?0 ? ?t? ? ? ? ? ? P ? ?
?
?P ? ? * ? ? ?
??
?
? ?0 ? ?t? ? ? ? ? ? ? ? ? ? ?
?R ? ? * ? ? ?
?d
?
c ?$ ? ? ? ? ? ??
? ? ? ?
?
? ?0 ? ?Rt? ? ? ? ? ? ?
?0? ? ? ?
? ? ?R Click to edit Master text styles
Second level
Third level
Fourth level
Fifth level ? !
?
S ??
?
? ?6 ? ?{t? ? ? ? ? ? ? _ P ? ? ?
?P ? ? * ? ? ?
??
?
? ?6 ? 0?t? ? ? ? ? ? ? _? ? ? ? ?
?R ? ? * ? ? ?
?H
? ? ?0 ? ? ?h ???? ? ? ? ? ??? ??? ??? 33? ?? ?? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. 1v??慖 ?? ? ? ? ? ? ?. ?( ?
? ?x ?
?
c ?$ ? ??? A ? ? ? Pp?+ ? ? ?
? ? ?r
? S ? ? ??? ? ? ? P` P
? ? ?
? ? ?? ?
?
? ?0 ? ?$?? ? ? ? ? ? ? ?
`?o
? ? ?> Sridhar Guthula
W3C XML Schema 1.0 User Experiences
06-21-2005 ? ? ( 2 / ? 0 ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. .v?p??m + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? 0 ? ?$ ?( ?
? ?r
? S ? ? l?h? ? ? ? `} ? ?
h
? ? ?r
? S ? ? ??h? ? ? ? ` ? ? h
? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. .v???? + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? @ ? ?$ ?( ?
? ?r
? S ? ? ??t? ? ? ? `} ? ?
t
? ? ?r
? S ? ? X?t? ? ? ? ` ? ? t
? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. /v??? + D?= '? ? ???? =?
@B? + ?? ?
? ? ? ? ? < ?F ?( ?
? < ?r
? < S ? ? \g?? ? ? ? `} ? ?
?
? ? ? ?
? <
c ?$ ? |^?A ? ? ? ? ` ? ? ?
?( ? ? ?H
? < ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. tv???r? + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? ? ? , ?$ ?( ?
? , ?r
? , S ? ? (??? ? ? ? `} ? ?
?
? ? ?r
? , S ? ? X??? ? ? ? ` ? ? ?
? ? ?H
? , ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. 4v? ??? + D?= '? ? ???? =?
@B? + ?? ?
? ? ?? p ? ?x ?( ?
? ?r
? S ? ? ??? ? ? ? `} ? ?
?
? ? ?? ?
?
? ?? A ?0 ???? ???? ? ? ? ??? ?? ? q u i c k t r e e _ s o a p _ s e c u r i t y ? ??0~ ? ? ? ?H
? ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. 2v?0 :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ?
? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z s e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?? Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?L C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s d i f f i c u l t ? ' ' ?,
? Z ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?? Support for different aspects on the same XML Schema
Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Instead of adding more attributes to XSD:Schema, separate files bundled along with XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. Z ? Z ? ?P ?
? 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ? ?
? ? ? D ? ?( ?
? D ?r
? D S ? ? \??? ? ? ? ` ? ? ?
? ? ?H
? D ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ?v???? + D?= '? ? ???? =?
@B? + r Dr ?? ? ?
r ̑
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E ????G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o ? q r s t u v w x y z { | } ~ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ????????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ????????? ????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ????? R o o t E n t r y ???????? ??d?O??? ? ?)? ?w]ˬv?? @ P i c t u r e s ???? ???? @? C u r r e n t U s e r ???????????? / S u m m a r y I n f o r m a t i o n ( ???? p ?T P o w e r P o i n t D o c u m e n t ( ???????????? F ? D o c u m e n t S u m m a r y I n f o r m a t i o n 8 ???????? ? ???????????? ???????????? d ? d @ ??? ?????? @@ `` ?? ? ?? ? P 9
O ? b ?$ ?^?]??n?_ ?R???? ? b ?$ %??%? ??{??\?? -7 ? b ?$ ??Yk?*3?7y$ĕ? K b ?$ ;??w?& ???[? 7 $T ? ?0 ? ? ?A ? ? ?A ? @ ? ? ? ? ? ?3 ???? ʚ;??? ʚ; ?g ? ?4 B d B d ? z[ 0 ????
??? p ? p p ? @ < ?4 d d d d 0? ? 0l? @? ? ?8 ?0 ? _ _ _ P P T 1 0 ?
? ? ? ?0 ? , ? Q u i c k T r e e I n c . O ? ?
= ?? ? ? ?
? ?2 Application of XML Schema in Web Services Security ? 3 3 ? ? ? About me ?
? ?W 10 years in enterprise software business
XML focus since 1998
Projects
XML Schema 1.0 validation engine, SOAP security framework,? XSLT 1.0 compiler, hardware based XML Parser.
Large XML based language for a declarative constraint engine
Storing XML documents in a RDBMS
XML Schemas for Catalog Services, XML based RPCs and Workflows Systems ?. G Z Z G ? = ? ? ?% QuickTree SOAP Security Module (SSM) ? & $ ( ( ? ? ?? Designed from the ground up with OEM integration in mind, the SSM hides the complexities of XML processing and allows network equipment like Firewalls, SSL VPN devices and Load Balancers to inspect and secure Web Services traffic ? ? ? SOAP Security in the Network ? ? ?
? ? ? Features ? ?? XML Denial of Service Prevention ?- Checking for XML well-formedness, nested element depth, element length, message size, external entities, attribute length, etc
WSDL Based Access Control ?- Limit a user or group's access to particular services or operations defined in the WSDL file
SOAP Structural and Parameter Validation -?Prevent mal-structured SOAP messages and apply parameter validation using type checking with full support for regex based schema types
SQL and Command Injection Protection ?- Detect and block command injection attacks, commonly hidden as valid parameters
Streaming mode interface -?XML messages can be forwarded to the QuickTree module as they come in without blocking ?? ? P ] ( ? $ P W ?> :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z s e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?? Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?L C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s d i f f i c u l t ? ' ' ?,
? Z ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?? Support for different aspects on the same XML Schema
Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Instead of adding more attributes to XSD:Schema, separate files bundled along with XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. Z ? Z ? ?P ?
? 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ?$ ?
? ? ?? @? P ?$ ?( ?
? P ?r
? P S ? ? ???? ? ? ? `} ? ?
?
? ? ?r
? P S ? ? ??? ? ? ? ` ? ? ?
? ? ?H
? P ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?8 ?0 ? _ _ _ P P T 1 0 ? ?. ?v??g?? r qR ?o ? ?
MR r ` ?u ?( ? ? ? ?
?
?? ? ?, s g u t h u l a @ q u i c k t r e e . c o m ?: m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ? / ? 0 ? ?L ?D A r i a l l? l? h? ? ԥ ?0 ? z[ 0? " ? ? @ ?? ? . ?
@ ?n ??? " d ? d @ ??? ??????
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ??՜.?? +,??D ??՜.?? +,??( ? ? ? ? ? ? ? ? ?
? ? ? ?
? ? On-screen Show guths ee ? H A
Arial Default Design Slide 1
About me & QuickTree SOAP Security Module (SSM) SOAP Security in the Network Features % QuickTree SOAP Security Module (SSM) Slide 7 WSDL Based validation Compliance Levels ! XML Denial of Service Prevention Validating Canonical XML Views or Aspects
Contact Info Slide 14 Fonts Used Design Template
Slide Titles ? 8 @ _PID_HLINKS ? A t m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ` ?s ?( ? ? ? ?
?
?? ? ?, s g u t h u l a @ q u i c k t r e e . c o m ?: m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ? / ? 0 ? ?L ?D A r i a l l? l? h? ? ԥ ?0 ? z[ 0? " ? ? @ ?? ? . ?
@ ?n ??? " d ? d @ ??? ?????? @@ `` ?? ? ?? ? P 8
O ? b ?$ ?^?]??n?_ ?R???? ? b ?$ %??%? ??{??\?? -7 ? b ?$ ??Yk?*3?7y$ĕ? K b ?$ ;??w?& ???[? 7 $T ? ?0 ? ? ?A ? ? ?A ? @ ? ? ? ? ? ?3 ???? ʚ;??? ʚ; ?g ? ?4 B d B d ? z[ 0 ????
??? p ? p p ? @ < ?4 d d d d 0? ? 0l? @? ? ?8 ?0 ? _ _ _ P P T 1 0 ?
? ? ? ?0 ? , ? Q u i c k T r e e I n c . O ? ?
= ?? ? ? ?
? ?2 Application of XML Schema in Web Services Security ? 3 3 ? ? ? About me ?
? ?W 10 years in enterprise software business
XML focus since 1998
Projects
XML Schema 1.0 validation engine, SOAP security framework,? XSLT 1.0 compiler, hardware based XML Parser.
Large XML based language for a declarative constraint engine
Storing XML documents in a RDBMS
XML Schemas for Catalog Services, XML based RPCs and Workflows Systems ?. G Z Z G ? = ? ? ?% QuickTree SOAP Security Module (SSM) ? & $ ( ( ? ? ?? Designed from the ground up with OEM integration in mind, the SSM hides the complexities of XML processing and allows network equipment like Firewalls, SSL VPN devices and Load Balancers to inspect and secure Web Services traffic ? ? ? SOAP Security in the Network ? ? ?
? ? ? Features ? ?? XML Denial of Service Prevention ?- Checking for XML well-formedness, nested element depth, element length, message size, external entities, attribute length, etc
WSDL Based Access Control ?- Limit a user or group's access to particular services or operations defined in the WSDL file
SOAP Structural and Parameter Validation -?Prevent mal-structured SOAP messages and apply parameter validation using type checking with full support for regex based schema types
SQL and Command Injection Protection ?- Detect and block command injection attacks, commonly hidden as valid parameters
Streaming mode interface -?XML messages can be forwarded to the QuickTree module as they come in without blocking ?? ? P ] ( ? $ P W ?> :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ?
? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?? Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?L C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s d i f f i c u l t ? ' ' ?,
? Z ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?? Support for different aspects on the same XML Schema
Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Instead of adding more attributes to XSD:Schema, separate files bundled along with XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. Z ? Z ? ?P ?
? 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ?} ?
? ? ?? ? ? 4 ?$ ?( ?
? 4 ?r
? 4 S ? ? ?? ? ? ? `} ? ?
?
? ? ?r
? 4 S ? ? |Z?? ? ? ? ` ? ? ?
? ? ?H
? 4 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. sv? ?? + D?= '? ? ???? =?
@B? + r ?
?? ? ?
? ? ` ?h ?( ? ? ? ?
?
?? ? ?, s g u t h u l a @ q u i c k t r e e . c o m ?: m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ? / ? 0 ? ?L ?D A r i a l l? l? h? ? ԥ ?0 ? z[ 0? " ? ? @ ?? ? . ?
@ ?n ??? " d ? d @ ??? ?????? @@ `` ?? ? ?? ? P 8
O ? b ?$ ?^?]??n?_ ?R???? ? b ?$ %??%? ??{??\?? -7 ? b ?$ ??Yk?*3?7y$ĕ? K b ?$ ;??w?& ???[? 7 $T ? ?0 ? ? ?A ? ? ?A ? @ ? ? ? ? ? ?3 ???? ʚ;??? ʚ; ?g ? ?4 B d B d ? z[ 0 ????
??? p ? p p ? @ < ?4 d d d d 0? ? 0l? @? ? ?8 ?0 ? _ _ _ P P T 1 0 ?
? ? ? ?0 ? , ? Q u i c k T r e e I n c . O ? ?
= ?? ? ? ?
? ?2 Application of XML Schema in Web Services Security ? 3 3 ? ? ? About me ?
? ?W 10 years in enterprise software business
XML focus since 1998
Projects
XML Schema 1.0 validation engine, SOAP security framework,? XSLT 1.0 compiler, hardware based XML Parser.
Large XML based language for a declarative constraint engine
Storing XML documents in a RDBMS
XML Schemas for Catalog Services, XML based RPCs and Workflows Systems ?. G Z Z G ? = ? ? ?% QuickTree SOAP Security Module (SSM) ? & $ ( ( ? ? ?? Designed from the ground up with OEM integration in mind, the SSM hides the complexities of XML processing and allows network equipment like Firewalls, SSL VPN devices and Load Balancers to inspect and secure Web Services traffic ? ? ? SOAP Security in the Network ? ? ?
? ? ? Features ? ?? XML Denial of Service Prevention ?- Checking for XML well-formedness, nested element depth, element length, message size, external entities, attribute length, etc
WSDL Based Access Control ?- Limit a user or group's access to particular services or operations defined in the WSDL file
SOAP Structural and Parameter Validation -?Prevent mal-structured SOAP messages and apply parameter validation using type checking with full support for regex based schema types
SQL and Command Injection Protection ?- Detect and block command injection attacks, commonly hidden as valid parameters
Streaming mode interface -?XML messages can be forwarded to the QuickTree module as they come in without blocking ?? ? P ] ( ? $ P W ?> :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ?
? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?B Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack of different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?4 C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s ? Z ?,
? N ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?? Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Support for different aspects on the same XML Schema
Instead of adding more attributes to XSD:Schema, separate files bundled along with XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. Z ? Z ? ?Z x S
? 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ?} ?
? ? ?? ? @ ?$ ?( ?
? @ ?r
? @ S ? ? ?}?? ? ? ? `} ? ?
?
? ? ?r
? @ S ? ? 4~?? ? ? ? ` ? ? ?
? ? ?H
? @ ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. ?v??E + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? ? ? 0 ?$ ?( ?
? 0 ?r
? 0 S ? ? @X?? ? ? ? `} ? ?
?
? ? ?r
? 0 S ? ? ???? ? ? ? ` ? ? ?
? ? ?H
? 0 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. rv????? + D?= '? ? ???? =?
@B? + ?} ?
? ? ?? ? ? 8 ?$ ?( ?
? 8 ?r
? 8 S ? ? ?? ? ? ? `} ? ?
?
? ? ?r
? 8 S ? ? ,H?? ? ? ? ` ? ? ?
? ? ?H
? 8 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. tv?`??- + D?= '? ? ???? =?
@B? + r D? 9? ?? ?? ?
?
? C? ` ? ?( ? ? ? ?
?
?? ? ?, s g u t h u l a @ q u i c k t r e e . c o m ?: m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ? / ? 0 ? ?L ?D A r i a l l? l? h? ? ԥ ?0 ? z[ 0? " ? ? @ ?? ? . ?
@ ?n ??? " d ? d @ ??? ?????? @@ `` ?? ? ?? ? P 8
O ? b ?$ ?^?]??n?_ ?R???? ? b ?$ %??%? ??{??\?? -7 ? b ?$ ??Yk?*3?7y$ĕ? K b ?$ ;??w?& ???[? 7 $T ? ?0 ? ? ?A ? ? ?A ? @ ? ? ? ? ? ?3 ???? ʚ;??? ʚ; ?g ? ?4 B d B d ? z[ 0 ????
??? p ? p p ? @ < ?4 d d d d 0? ? 0l? @? ? ?8 ?0 ? _ _ _ P P T 1 0 ?
? ? ? ?0 ? , ? Q u i c k T r e e I n c . O ? ?
= ?? ? ? ?
? ?2 Application of XML Schema in Web Services Security ? 3 3 ? ? ? About me ?
? ?W 10 years in enterprise software business
XML focus since 1998
Projects
XML Schema 1.0 validation engine, SOAP security framework,? XSLT 1.0 compiler, hardware based XML Parser.
Large XML based language for a declarative constraint engine
Storing XML documents in a RDBMS
XML Schemas for Catalog Services, XML based RPCs and Workflows Systems ?. G Z Z G ? = ? ? ?% QuickTree SOAP Security Module (SSM) ? & $ ( ( ? ? ?? Designed from the ground up with OEM integration in mind, the SSM hides the complexities of XML processing and allows network equipment like Firewalls, SSL VPN devices and Load Balancers to inspect and secure Web Services traffic ? ? ? SOAP Security in the Network ? ? ?
? ? ? Features ? ?? XML Denial of Service Prevention ?- Checking for XML well-formedness, nested element depth, element length, message size, external entities, attribute length, etc
WSDL Based Access Control ?- Limit a user or group's access to particular services or operations defined in the WSDL file
SOAP Structural and Parameter Validation -?Prevent mal-structured SOAP messages and apply parameter validation using type checking with full support for regex based schema types
SQL and Command Injection Protection ?- Detect and block command injection attacks, commonly hidden as valid parameters
Streaming mode interface -?XML messages can be forwarded to the QuickTree module as they come in without blocking ?? ? P ] ( ? $ P W ?> :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ?
? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n d H a r d w a r i z e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?B Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack of different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?4 C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s ? Z ?,
? N ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?| Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Support for different aspects on the same XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. ? P ? P ? ? ?P ? ] 9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? ?} ?
? ? ?? ? ? 8 ?$ ?( ?
? 8 ?r
? 8 S ? ? ?? ? ? ? `} ? ?
?
? ? ?r
? 8 S ? ? ,H?? ? ? ? ` ? ? ?
? ? ?H
? 8 ? ?0 ? ? ???? ?h ? ? ? ? ??? ??? ??? 33? ?? ?? ?? ?? ? _ _ _ P P T 1 0 ?i ?. tv?`??- + D?= '? ? ???? =?
@B? + r ?? ?? ?
?
k? ? ` ?? ?( ? ? ? ?
?
?? ? ?, s g u t h u l a @ q u i c k t r e e . c o m ?: m a i l t o : s g u t h u l a @ q u i c k t r e e . c o m ? / ? 0 ? ?L ?D A r i a l ?? ?? h? ? ? ?0 ? z[ 0 ? " ? ? @ ?? ? . ?
@ ?n ??? " d ? d @ ??? ?????? @@ `` ?? ? ?? ? P 8
O ? b ?$ ?^?]??n?_ ?R???? ? b ?$ %??%? ??{??\?? -7 ? b ?$ ??Yk?*3?7y$ĕ? K b ?$ ;??w?& ???[? 7 $T ? ?0 ? ? ?A ? ? ?A ? @ ? ? ? ? ? ?3 ???? ʚ;??? ʚ; ?g ? ?4 B d B d ? z[ 0 ????
??? p ? p p ? @ < ?4 d d d d L? ? 0?? @? ? ?8 ?0 ? _ _ _ P P T 1 0 ?
? ? ? ?0 ? , ? Q u i c k T r e e I n c . O ? ?
= ?y ? ? ?
? ?2 Application of XML Schema in Web Services Security ? 3 3 ? ? ? About me ?
? ?W 10 years in enterprise software business
XML focus since 1998
Projects
XML Schema 1.0 validation engine, SOAP security framework,? XSLT 1.0 compiler, hardware based XML Parser.
Large XML based language for a declarative constraint engine
Storing XML documents in a RDBMS
XML Schemas for Catalog Services, XML based RPCs and Workflows Systems ?. G Z Z G ? = ? ? ?% QuickTree SOAP Security Module (SSM) ? & $ ( ( ? ? ?? Designed from the ground up with OEM integration in mind, the SSM hides the complexities of XML processing and allows network equipment like Firewalls, SSL VPN devices and Load Balancers to inspect and secure Web Services traffic ? ? ? SOAP Security in the Network ? ? ?
? ? ? Features ? ?? XML Denial of Service Prevention ?- Checking for XML well-formedness, nested element depth, element length, message size, external entities, attribute length, etc
WSDL Based Access Control ?- Limit a user or group's access to particular services or operations defined in the WSDL file
SOAP Structural and Parameter Validation -?Prevent mal-structured SOAP messages and apply parameter validation using type checking with full support for regex based schema types
SQL and Command Injection Protection ?- Detect and block command injection attacks, commonly hidden as valid parameters
Streaming mode interface -?XML messages can be forwarded to the QuickTree module as they come in without blocking ?? ? P ] ( ? $ P W ?> :
r ? ) ? ? ?$ QuickTree SOAP Security Module (SSM) ? % % ( ? ?
? ?
? ?
User Experience ?, $ ?
? ? WSDL Based validation ? ?? X M L S c h e m a 1 . 0 v a l i d a t i o n e n g i n e ( C b a s e d )
G e n e r a t e s c h e m a b y c o m b i n i n g W S D L , X M L S c h e m a a n d S O A P
S t r e a m i n g a n ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????d H a r d w a r i z e d
S t r u c t u r a l V a l i d a t i o n v s D a t a - t y p e v a l i d a t i o n
A C L s
I s s u e s
S c h e m a S p e c i f i c a t i o n
X M L S c h e m a s w i t h m u l t i p l e t a r g e t n a m e s p a c e s
x s i : t y p e a n d e n c o d i n g s t y l e
M a p p i n g W S D L / S O A P t y p e s t o X M L S c h e m a t y p e s ( E x : s o a p e n c : a r r a y T y p e )
V e r s i o n i n g ?. ? P ? P ? ? ?b r K F
? ? ? Compliance Levels ? ?B Support compliance/conformance levels (like internationalization standards)
Structural validation and/or Data-type validation
Data-centric or Content-centric
Lack of different compliance levels causes vendors to claims full XML Schema compliance.
Reduced user confusion and reduced cost in investigating vendor compliance. ?< L R ? L R ? ? ? ? XML Denial of Service Prevention ? ! ! , ? ?4 C h e c k i n g f o r X M L w e l l - f o r m e d n e s s , n e s t e d e l e m e n t d e p t h , e l e m e n t l e n g t h , m e s s a g e s i z e , e x t e r n a l e n t i t i e s , a t t r i b u t e l e n g t h , e t c
M o s t o f t h e X M L S c h e m a d e s i g n e r s d o n o t c o n s i d e r s e c u r i t y
P o l i c i e s Q u i c k T r e e p r o v i d e s g l o b a l a n d U s e r - s p e c i f i c
I m p l e m e n t a t i o n t h r o u g h i n h e r i t a n c e , f a c e t s ? Z ?,
? N ? ? ? Validating Canonical XML ? ?] Support for validating canonical XML
Canonical form of a valid xml instance should be valid
?( \ ^ ?
? ? Views or Aspects ? ?| Given XML Schemas viewed in a different light by different users (network admin, application engineer, customer)
Support for different aspects on the same XML Schema
Example: Security aspect
Conformance/Compliance Levels: only do structural validation
Ignore Order/Canonicalization: canonical form of a valid xml instance should be valid
DoS configuration values
Xsi:type support ?. ? P ? P ? ? ?>
9 ?
? ? Contact Info ? ?d
Sridhar Guthula
855 Embedded Way
San Jos?, CA 95138-1018
USA
408-979-4800
sguthula@quicktree.com ? e e ?, > ? ? U
0 ? N d ? ? ? ?
Q & A ? ? r X? ? ?
4? N `