Way to protect my bpel and esb jar (SOA 10g) from reverse engineering?

Hi All
We would be sharing our BPEL and ESB jars with some other company for deployment? Is there a way to protect them so that they are not able to peak into the contents of the jar?
If I extract the jar file, i can see all my XSD, WSDL, XSL, BPEL and ESB files as it is (the same as in JDEV)?
is there a way to protect them? Please help its urgent!

The use of a Trusted Platform Module (TPM) is a viable and extremely cost-effective alternative to the HSM, if the encryption and key-management application is designed properly. This is the approach we took when storing encrypted data and encrypted-keys within a database for our key-,management system. However, when using cryptographic hardware modules in your solution (that also meet regulatory requirements for split-knowledge and multiple key-custodians), your design for the solution must be carefully thought out to ensure that the implementation is reasonably secure and that it meets regulatory requirements. Storing an unencrypted key (or password that decrypts a PBE-based key) anywhere on a disk is an invitation for disaster.

Similar Messages

HT4865 What's the best way to protect student info and work saved to iCloud from their school iPads?

I'm doing some prep work for next year's implementation of iPads in some of the lower elementary classes at my school. I've read about the hack-ability of iCloud lately in the online articles. What was happening in Norway is exactly what could be happening in classrooms next year if certain security procedures aren't put in place. I would be grateful for any suggestions that you might have on how to beef up security for the students' work and info, and if you have any suggestions about the best ways to learn with iPads with children in grades K-4 (4-10 years old).

I'm doing some prep work for next year's implementation of iPads in some of the lower elementary classes at my school. I've read about the hack-ability of iCloud lately in the online articles. What was happening in Norway is exactly what could be happening in classrooms next year if certain security procedures aren't put in place. I would be grateful for any suggestions that you might have on how to beef up security for the students' work and info, and if you have any suggestions about the best ways to learn with iPads with children in grades K-4 (4-10 years old).

Performance tuning in BPEL and ESB

Hi,
Any one can tell me how to do Performance tuning in BPEL and ESB.
How to create WEB SERVICES in BPEL

Hi',
Performance tuning in BPEL and ESB.
***This is very big topic I can give you 2 points here
In BPEL we should avoid the use of duplicate variable, the best way to do this is, when ever we are creating a new variable
we need to ask can we reuse variable from inside the process, example when creating the input/output variable in Invoke activity
we need to check if we can use some existing variable instead of creating new.
All the DB related operation should be performed in 1 single composite.
How to create WEB SERVICES in BPEL
Not sure what you want to ask here, as BPEL is itself a webservice.
-Yatan

Deployment of BPEL (and ESB) into Clustered Environment

Hi All,
I was after any view points / pointers into peoples experiences into deployment of BPEL and ESB into a clustered Oracle iAS SOA suite environment, where there are two or more nodes running BPEL, ESB etc with a corresponding OHS Loan Balancers. I have been unable to find any specific information with regards to recommendations into the best ways to deploy into a clustered environment.
My viewpoints are there are two alternative approaches that could be used, both of which use ANT deployment scripts to register / deploy the various services.
(1) Leaving all nodes up in the cluster and using a properties file to specify the relevant details, deploy to one environment allowing the load balancer to distribute the software to the respective nodes in the cluster
(2) Deploy to each of the nodes in turn ensuring all other nodes in the cluster are taken down during each separate deployment
What are other peoples thoughts / experiences / recommendations?
Thanks in Advance
Dave

I don't believe there is any real information on deployments in a cluster in those documents.
There is a note on metalink 457654.1 which says to apply to each node, while doing this shut down the other servers. From experience this worked for some configuration and not others.
Can you say what cluster deployment you used, e.g. 10.1.3.1 or 10.1.3.3 with BPEL and ESB-RT in the same oc4j?
Also what version are you on. If you are on 10.1.3.4 using the 10.1.3.3 deployment configuration you don't need to shutdown the nodes. And you can get away with just deploying to one node but make sure your <ORACLE_HOME>/bpel/system/config/collaxa-config.xml file has been set to cluster = true. Look at metalink note 746251.1.
You can experience the notorious Process Lock Timeout Error when not shutdown cleanly but this is resolved using the best practice guide http://www.oracle.com/technology/tech/soa/soa-suite-best-practices/soa_best_practices_1013x_drop1.pdf
ESB can be applied to just one node.
Make sure that all your endpoints are pointing to the load balancer and not the actual node themselves.
Also you connect string is different in your build.properties make sure of the following
cluster = true
oc4jinstancename = default_group
local.oc4jinstancename = oc4j_soa (or the oc4j container with BPEL)
esb
deployer.uri=deployer:cluster:opmn://hostname:opmn port/default_group
cheers
James

What is the main difference between BPEL and ESB

Hi all,
I am making use ESB in my application .Where the my client application calls ESB and inturn the ESB calls the BPEL process .
I want to know the differences between BPEL and ESB,I came to know that ESB can do messaging and routing ,where my BPEL process can also do the same thing .
I came to know form a vendor that ESB is used for connecting to multiple end points ,where as my BPEL process can also do this.
SO what is main purpose of using ESB ?
Cheers,
Kalyan.
Message was edited by:
patti

Hi,
Look for the blog entry dated 1st october 2007.
URL:
http://abhishek-soablog.blogspot.com
Cheers,
Abhi...

Forcing HTTP comm between BPEL and ESB

Hi all,
for demo purposes, I'd like to disable the internal and non-HTTP communication between BPEL and ESB when both are deployed on same OC4J container.
I do not want to modify any WSDL but, if possible, disable somehow such internal communication. AFAIK, there was a property named "optSoapShortcut" in 10.1.2 but it no longer exists in 10.1.3.
Any clues?
TIA

Hi.
Sometime ago I tried to work with a BPEL property named preferredBindings, but it didn't work at all.
WSM Gateway is bypassed when WSDL has SOAP and JCA binding. How to choose??
I don't know if I came across a bug, but in theory I believe this is something like this:
To indicate you want ESB binding:
<property name="preferredBindings">http://www.oracle.com/esb/</property>
To indicate you want SOAP binding (I'm not sure):
<property name="preferredBindings">http://schemas.xmlsoap.org/wsdl/soap/</property>
Please let me know about your results.
Regards.
Denis

Set polling time with BPEL and ESB File Adapters

We have create file adapters in BPEL and ESB. We see where you can set the frequency for polling but do not see a place to set the polling time. We would like it to check a directory every 24 hours at midnight. We can set the 24 hours but not the midnight. How does ESB and BPEL determine the time to run based upon the interval?

Oracle SOA is started, from the time the adapter is loaded, the interval counting starts. It is not on a particular time.
If you want to start a BPEL process on a certain time, you could use the quartz timer fucntionality of BPEL to start an instance on a particular time (like unix cron tab).
Marc

I want Bpel and ESB process PDF

Hi all,
This is navin, I new to SOA BPEL and ESB, so could you plz provice any pdf's links to me..
Thanks in Advance,
Navin

Hi Navin,
SOA 11g documentation is here:
http://download.oracle.com/docs/cd/E17904_01/ipu.htm
You can easily find there links to PDF version.
E.g. BPEL pdf is here
http://download.oracle.com/docs/cd/E17904_01/integration.1111/e10224.pdf
10g version is here:
http://www.oracle.com/technetwork/documentation/appserver1013-101821.html
Regards,
Milan

BPEL and ESB Tutorial

Can any one help me to get basic knowldge of working with BPEL and ESB .
Can any one suggest me tutorial to start with above two technologies.
Thanks in Advance
ivaR

See the below link for the BPEL and ESB tutorials. Start with the quick start tutorials.
http://www.oracle.com/technology/products/ias/bpel/htdocs/dev_support.html#tutorials

BPEL and ESB in different Servers

Hi ,
What is the advantage of having BPEL PM and ESB installed in different servers ?

In my knowledge it has it own merits and demerits
IF (BPEL and ESB) installed in dfferent OC4Js (JVMs)
Merits
1) Individual JVM for each component means more memory allocation and support from JVM
2) More number of processes can be deployed.
DeMerits
1) ESB and BPEL communication can happen via SOAP over HTTP only whereas had these been deployed in the same JVM (oc4j) it can do native communication.
Edited by: cdmnagaraj on Apr 22, 2009 5:17 AM

Listener Adapters in BPEL and ESB

I created 3 BPEL Processes and 3 ESB's listening to OA Adapters. All of them listen to the same event. I found from the UI that only one subscription is created for all the 8 listener OA Adapters. When the event is raised all my BPEL Processes are instantiated where as only one of the ESB process was instantiated. Why is this happening? Shouldn't the behaviour be the same across BPEL and ESB.
Also can anyone tell me why a single subscription is created for all the listener Adapters? Shouldn't it be like each process will have a subscription and we can disable them if we don't use it.
Thanks,
Vijay

Vijay,
Generally the EIS(backend ERP / CRM), adapters and their framework would publish the message to the listeners only once. Once it is published successfully, it will not look for any other subscrbibers......
Note that this would vary between ERP / CRM, adapters, adapter framework and their implementation.
In case of SAP, the behavior of the MySAP adapter is as mentioned above. But, if you look at the PeopleSoft adapter, it is tied to one ip address and one port(message node configuration within PeopleSoft). So, if you want to publish to multiple listeners, then you will have to create multiple message nodes within peoplesoft.

Flash tutorial for BPEL and ESB stuff

Hi
Thank you for reading my post
is there any flash tutorial for BPEL and ESB support of Jdeveloper ?
something step by step which helps me to learn these features of jdeveloper.
thanks

Thank you for the link, it was good.
I want to ask something that i found confiusing.
there are more than one BPEL designer (development environment) available from ORacle.
One is Eclipse based, one is Jdeveloper,...
i want to know, which one is mature?
thanks

What is the best way to back up photos and videos to a dvd from iPhoto, not in iPhoto format but just in jpeg format to access on either windows or mac

what is the best way to back up photos and videos to a dvd from iPhoto, not in iPhoto format but just in jpeg format to access on either windows or mac

When you export the videos out of iPhoto be sure to select Kind = Original. Otherwise you'll just get an image file of the first frame of the video.
OT

Purging BPEL and ESB: Schedule or age based

Hi
We all know that it's easy to purge all instances in BPEL and in ESB we can manually purge everything older than a certain age etc.
But, how can we automate this process? I would like ESB and BPEL to automatically purge everything complete, that is older than x days.
Has anyone worked out a way of doing this?
Cheers
Chris

Hey Chris,
There is a thread in the BPEL forum with respect to the same: handling the ORABPEL-schema in production
Cheers, Sjoerd

BPEL and httpbindings in SOA Suite

Okay, I installed the soasuite, tried the SOAdemo, which works fine. Now I'm trying to get my 'old' BPELcode from BPEL 10.1.2 (or whatever, the earlier version) to get to work. Here I have a variation of the http-get-binding sample, where BPEL gets started from a http-get request. I can;t get it to work with the SOA-suite... what is the correct binding to invoke?
My service binding:
<binding name="receiveApplicationBinding" type="client:receiveApplication">
<http:binding verb="GET" />
<operation name="receive">
<http:operation location="/Receive" />
<input>
<http:urlEncoded />
</input>
<output>
<mime:mimeXml part="Body" />
</output>
</operation>
</binding>
<service name="receiveApplicationService">
<port name="receiveApplicationPort" binding="client:receiveApplicationBinding">
<http:address location="http://localhost:8888/httpbinding/default/receiveApplication" />
</port>
</service>
However, when calling http://localhost:8888/httpbinding/default/receiveApplication/Receive?parameters.. I get 500 internal server error...
Where does this httpbinding point to in the SOA suite? It worked in the older BPEL PM on port 9700....

can you pls turn on ws logging in the bpel console (from info to debug) and get us the output from the logs.. that might help to diagnose it .. also have you checked that
according to http://localhost:8888/httpbinding/default/receiveApplication there is a process in the default domain named receiveApplication with an operation named Receive.
hth clemens

Way to protect my bpel and esb jar (SOA 10g) from reverse engineering?

Similar Messages

Maybe you are looking for