2009 AF SOA Developer's Conference May 20

advertisement
2009 AF SOA Developer’s Conference
May 20-21 2009
Montgomery, AL
Conference Overview
The 2009 AF SOA Developer’s Conference will focus on SOA related collaboration and reuse capabilities
in the Air Force and DoD. The development of service oriented capabilities poses increasing challenges
for AF and DoD software engineering teams, which are often distributed geographically and
organizationally. The discipline of AF and DoD software engineering must address these challenges
through the development and refinement of new collaborative and reuse techniques, processes, and tools
that build upon sound engineering principles. Moreover, the ubiquity of software means that the discipline
of AF and DoD software engineering itself is also extending. Software engineering teams and
organizations must think of IT components not only as a software or hardware products, but also as
services that can be shared and reused across the enterprise. This event will assemble a community of
AF and DoD SOA peers to exchange ideas and discuss what has worked, what did not work, and review
best practices. Attendees will benefit from lessons learned in real world implementations. Sessions
presented will provide key insights into developing, managing and governing SOA related collaborative
and reuse capabilities within the AF and DoD.
Registration
Registration is now open for the AF SOA Developer’s Conference 2009. To register, visit the Conference
Registration page on the Montgomery AFCEA web site at:
http://afceamontgomery.org/2009MITSSCRC
Contacts
For more information concerning the AF SOA Developer’s Conference 2009, please contact Mr. John
Hulsey, (COM) 334-416-1943, (DSN) 596-1943, john.hulsey@gunter.af.mil, or Mr. Scott Raley, (COM)
334-416-4709, (DSN) 596-4709, scott.raley@gunter.af.mil .
Conference Agenda-At-A-Glance
*Agenda subject to change.
Wednesday – May 20, 2009
2:00 - 5:00 CST
2:00-2:05 WELCOME
Welcome and Administrative Remarks, Mr. Olan Waldrop, President Montgomery AFCEA
Chapter
2:05-2:55 KEYNOTE: Featuring: Brig Gen Ronnie D. Hawkins, Jr.,
Brig. Gen. Ronnie D. Hawkins Jr. is Director, Infrastructure Delivery, Office of Warfighting
Integration and Chief Information Officer, Office of the Secretary of the Air Force, the Pentagon,
Washington, D.C.
General Hawkins received his commission as a distinguished graduate of the ROTC program at
Angelo State University in 1977. He has held a variety of communications positions, including an
assignment on the Joint Staff as support manager for command, control, communications and
computer systems, and he later served as Director of C4 Systems for Joint Task Force–
Southwest Asia.
General Hawkins has commanded Cadet Squadron 24 at the U.S. Air Force Academy; Air
Combat Command's Computer Systems Squadron and Communications Group; and Air Force
Officer Accession and Training Schools at Maxwell Air Force Base, Ala. He has served as the
Director of Communications and Information, Headquarters Pacific Air Forces, and Director of
Communications Operations, Office of the Deputy Chief of Staff for Installations and Logistics,
Headquarters U.S. Air Force. General Hawkins has also been Deputy Chief of Staff,
Communications and Information Systems, Multi-National Force-Iraq.
2:55-3:45 KEYNOTE: Featuring: Dr. Tim Rudolph,
Dr. Tim Rudolph, a Senior Level executive, is the Chief Technology Officer , Electronic Systems
Center, Hanscom Air Force Base, Mass. Dr. Rudolph also currently chairs the ESC Chief
Technical Officers Team. In that role, he works with the senior technical representatives from
each of the other acquisition wings and representatives from the Office of the Assistant Secretary
of the Air Force for Acquisition and the Air Force's Warfighting Integration and Chief Information
Officer. Additionally, as the Enterprise Director of Integration, he leads a number of initiatives
collaborating across all the acquisition Wings at ESC.
Dr.
Rudolph
gained
system
development
experience in
multiple information
technology companies. In March 1994, he co-founded Paradigm Technologies, Inc., an industry
partner focused on the application of technologies in creative ways for multiple services, agencies
and commercial enterprises, which he managed until divesting in 2007. He is a recognized
pioneer in open systems such as Posix standards as well as modeling and simulation
technologies, with extensive experience leading government and industry partners to advance
technologies for enterprise solutions.
Dr. Rudolph has applied experience in multiple technical disciplines through all phases of the
acquisition lifecycle, including requirements analysis, architecture, high-level design,
development, integration, test, fielding and support. He has held a number of positions supporting
Air Force activities. As a founding member of the ESC Enterprise Integration Team, he directed
and supported wing, cross-wing, cross-system center and cross-agency integration activities. Dr.
Rudolph is a Certified System Engineering Professional by the International Council on Systems
Engineering
3:45-4:00 BREAK
4:00-4:50 KEYNOTE: Featuring: Mr. Kerrie Holley, IBM CTO SOA COE
Kerrie Holley is IBM's Global SOA Center of Excellence's SOA Leader. His team's charter is the
creation and maintenance of best practices, method and IP, and to ensure consistency across all
geographies for SOA.
In recognition of his sustained technical achievement and leadership, Mr. Holley was appointed
an IBM Distinguished Engineer in 2000. In that same year Mr. Holley was elected to the
prestigious IBM Academy of Technology which is comprised of 300 of IBM's top technologists.
His expertise centers around software engineering, architecture and translating business
requirements into designs for cutting-edge network centric distributed solutions with a focus on
business and IT fusion. Responsibilities include technical leadership for services oriented
architecture, technical oversight for network centric software engineering projects, adaptive
enterprise architecture design, IT strategy, formation of partnerships among clients and vendors,
leading architecture reviews, and managing technical risks.
As CTO for the SOA and Web Services Center of Excellence, Mr. Holley, focuses on helping
customers identify the business needs and technology capabilities needed to take advantage of
service oriented computing and to realize sustained benefits of applying SOA.
Mr. Holley has a Bachelor of Art degree in mathematics from DePaul University and a Juris
Doctorate degree from DePaul School of Law.
4:50 CLOSING REMARKS
Mr. Olan Waldrop, President Montgomery AFCEA Chapter
Thursday – May 21, 2009
7:00 - 4:15 CST
7:00-8:00 SESSION TOPIC:
7:00-7:20
Securing Your SOA: Security Management in a Service-Oriented
Architecture
Presentation: Successful SOA Security Integration
This presentation will focus on successful strategies for SOA Security integration.
Specifically, this presentation will:
o
o
o
o
Highlight best practices and pitfalls related to SOA security integration
Provide a vendor-agnostic and technology-agnostic design for access control
& policy decision enforcement for clients & services, with code examples &
references.
Provide an overview & code of a custom Tomcat Security realm that can be
customized for any enterprise and used by portals and web servers in order
to map enterprise Attribute Services (ABAC) to the J2EE role-based (RBAC)
security model for container-managed security
Provide lessons-learned from several government SOA-based projects.
The code for the custom Tomcat Security Realm will be made available for
reuse.
Presenter: Mr. Kevin T. Smith, ManTech Information Systems & Technology
Kevin T. Smith is a Senior Technical Director at ManTech Information
Systems & Technology, and is the company’s Core Competency Leader for
Application Information Assurance. A frequent presenter at industry
conferences such as the RSA Security Conference, JavaOne, ApacheCon,
SemTech, the Association for Enterprise Integration, the Potomac Forum,
and Net-Centric Warfare, he has served as the Chief Security Architect for
numerous award-winning SOA initiatives throughout the DoD and IC, and
develops software-based security solutions for many customers. Smith is the
published author of numerous articles revolving around Information Security
and SOA in magazines such as SOAWorld & SOAInstitute, and he is the coauthor of numerous technology books, including last year’s Applied SOA:
Service-Oriented Architecture and Design Strategies, and The Semantic Web:
A Guide to the Future of XML, Web Services, and Knowledge Management.
7:20-7:40
Presentation:
This presentation will focus on the AF SOA Initial Infrastructure Build (IIB) Pilot
security approach. It will include a description of Identity Federation, the use DoD
PKI credentials for user authentication, and the use of SAML 2.0 tokens issued by
WS-Trust Security Token Services (STSs) to support authorization decisions by
Services.
Presentation highlights:
o
o
o
o
o
Highlight SOA IA Fundamentals & applicable standards
Discuss current AF SOA IIB Pilot Implementation
Discuss Enterprise Level Security (ELS) and End-To-End Security Vision &
Technical Challenges in Achieving that vision
Provide lessons-learned from AF SOA IIB pilot efforts to date.
Provide application and service integration details
Presenter: Mr. Michael Leonard, MITRE
Michael C. Leonard is a Principal Information Systems Engineer with The MITRE
Corporation. He has a Bachelor’s Degree in Electrical Engineering from Georgia
Tech and a Master’s Degree in Electrical Engineering from Florida State University.
He has over 10 years of Information Assurance experience, with strong background
in Identity Management / Identity Assurance, Public Key Infrastructure (PKI),
Biometrics, and Identity Federation. Mr. Leonard currently supports the AF
Cryptologic Systems Group at Lackland AFB, TX, and has provided engineering
support for the AF SOA Initial Infrastructure Build (IIB) pilot in the areas of PK
Enabling, Security Token Services, and Identity Federation. Mr. Leonard also
represents CPSG on the AF Chief Technology Officer (CTO) team.
7:40-8:00
Topic Q&A Session
8:00-9:00 SESSION TOPIC: SOA Testing: Tools & Best Practices
8:00-8:20
Presentation: SOA Testing: Tools & Best Practices
Service-Oriented Architecture (SOA) is changing the fundamental way in which
applications are being developed and delivered providing increased agility, cost
reduction, information sharing, and consolidation. With SOA, application logic is no
longer located in a single server environment, developed on a single platform or
language, and developed by a single development team. New SOA applications
consist of multiple layers of different technologies, tied together by protocols and
messaging standards over the Internet. These highly flexible applications that
integrate so many components often include many points of failure where these
systems connect.
This presentation will focus on best practices for testing SOA Solutions and a SOA
Test Approach that extends traditional functional and performance testing tools such
as HP QuickTest Professional (QTP) and HP LoadRunner with tools and practices
to provide complete end-to-end validation of processes that connect highly
interdependent services.
Presentation highlights:
o
How SOA changes the way testing is conducted and the testing tools
required
o
o
o
Continuous testing practices before and during deployment
Why Security testing moves from an end of project activity to an entire
project life cycle activity
A Flexible SOA Test Approach for testing services of highly interdependent
systems
Presenter: Mr. Rick G. Goodwin, SAIC
Rick G. Goodwin is an SAIC Technical Fellow and Chief Scientist for the
Enterprise and Missions Solutions Business Unit at Science Applications
International Corporation (SAIC). Mr. Goodwin serves as a member of the
Defense Solutions Group (DSG) Systems Engineering Technical Council
(SETC) providing engineering leadership towards strategic research and
business development initiatives within SAIC and the Defense Solutions
Group.
Mr. Goodwin is Chief Engineer for SAIC’s Enterprise Services
Integration and Interoperability Laboratory (ESIIL) and the Service Oriented
Architecture (SOA) Based Operations Independent Research and
Development (IR&D) program. ESIIL consists of eight different research labs
throughout the United States providing a distributed SOA infrastructure for
performing research, developing operationally threaded demonstrations, and
transitioning legacy C4ISR and Cyber capabilities to services implementations.
8:20-8:40
Presentation: Application Security Testing
This presentation will focus on successful strategies for identifying and mitigating
security vulnerabilities in SOA applications. Vulnerabilities are introduced into
application development at all stages of the application lifecycle. The earlier in the
lifecycle you can identify the vulnerability, the cheaper the fix will be. To assist with
identifying and mitigating vulnerabilities as early as possible, this session will
introduce the audience to a training curriculum, a suite of tools, and a process that
can be used within the coding and testing phase as well as the operational
maintenance phase of the lifecycle.
Presenter: Mr. Daniel Bartko, 754 ELSG Application Software Assurance
8:40-9:00
Topic Q&A Session
9:00-9:30 BREAK
9:30-10:30 SESSION TOPIC:
9:30-9:50
BPEL & SOA: Strategy, Design, & Best Practices
Presentation: SOA: Context is Everything
This presentation will discuss the definitions of SOA and BPEL from a developer
perspective.
Presentation highlights:
o
Illustrate how that developer perspective relates to SOA Best Practices when
approaching a platform such as the IIB/SMI ELS
o
Share lessons learned while designing and implementing BPEL Processes for
the Deployment Readiness Service (DRS) into the AF SOA Initial
Infrastructure Build (AF SOA IIB) environment.
Presenter: Mr. Jeffrey M. Cecil, General Dynamics
Jeffrey M. Cecil is a Senior Principal Engineer at General Dynamics Information
Technology. While spending his early years designing and implementing Document
Management and Workflow systems for financial data centers, he dealt with the real
world problems encountered via large business acquisitions and the attempts to
merge technology and operations. While at GDIT he was technical lead for the team
that developed the first SOA oriented application, the Deployment Readiness
Service (DRS), for the Initial Infrastructure Build (IIB).
9:50-10:10 Presentation: USAF Business Process Integration using BPEL PM
The AF continues to increase its commitment to and exploitation of Service Oriented
Architecture technologies. The AF in collaboration with Accenture, has taken a first
but giant step in implementing Oracle BPEL PM for business process flow
orchestration and application integration to underpin AF financial transactions. This
presentation will talk about how BPEL is implemented in DEAMS to automate
business processes as well as explore its vast potential to become an Air Force
standard for business process integration.
Presenter: Mr. Vic Burman, Accenture
Vic Burman is currently Accenture’s chief architect and engineer on DEAMS, where
he is responsible for architecture, installation, and operations and maintenance of 20
development environments comprising the DEAMS build process. He works
intimately close with CIE, GCSS-AF pre-production, and production environments.
Vic has more than 15 years experience with Oracle technology, intimate knowledge
of Oracle RDBMS internals and all aspects of Oracle E-Business Suite application
and database administration, and award-winning expertise in supporting missioncritical database systems for Fortune 100 companies.
10:10-10:30 Topic Q&A Session
10:30-11:30 SESSION TOPIC: Metadata Environment (MDE): Supporting the AF Data Strategy
10:30-10:50 Presentation: Exploiting COI Metadata
This presentation will focus on design- and run-time use of Community of
Interest (COI) products such as process models, vocabularies, authoritative
data source designations and access rules:
Presentation highlights:
o
o
Support enterprise visible, accessible and understandable data (NetCentricity)
Describe standards and state-of-practice useful to COIs in the creation
of their products
o
o
Describe and demonstrate an implementation of a Metadata
Environment (MDE) offering aspects of Service Lifecycle Management,
to include registration, vocabulary maintenance, deprecation,
enterprise impact assessment, and semantic discovery of services,
vocabularies and information assets.
Provide lessons-learned from MDE implementation and COI
governance.
Presenter: Mr. Joshua Powers, Logistics Research
Joshua Powers is a Senior Advisor at the Council for Logistics Research. He
has an extensive background in the implementation of semantic discovery and
knowledge representation. He was the architect of the Oracle ConText
knowledge base, Semio’s Categorization and Classification engine and
Convera’s internet-scale ontology and semantic search engine. He has been
an evaluator and a Principle Investigator on DARPA projects involving entity
extraction, link detection and misinformation detection.
10:50-11:10 Presentation: AF/A1 Data Services: Metadata Service Development and Infrastructure
Presenter: Mr. Jeff Farrand, AF/A1
Chief, A1 Portfolio Governance, Data and Architecture
11:10-11:30 Topic Q&A Session
11:30-1:00 LUNCH BREAK
1:00-2:00 SESSION TOPIC: SOA & Web Services: Infrastructure & Application Solutions
1:00-1:20
Presentation: GCSS-AF Web Services Infrastructure & Support
This presentation will provide developers with an overview on how to use Web
services within GCSS-AF. Specifically, this presentation will address the
following topics:
Presentation highlights:
o
o
o
o
o
o
Overview the GCSS-AF Web services infrastructure solution in terms current
and planned capabilities
Overview the ESB to/from Web services transformation capabilities
(including transforming Flat Files to/from Web services)
Discuss DataPower SOA Appliance capabilities within GCSS-AF
Discuss the GCSS-AF Web services security solution
Discuss GCSS-AF Web services federation with other enclaves
Demonstrate GCSS-AF Web services deployment including process
overview, configurations and “how to” code examples
Presenter: Mr. Michael Acton, Strategic Initiatives
Mike Acton is the CTO of Strategic Initiatives for a major organization within
Lockheed Martin. He has gained significant insight from the SOA programs
he’s supported within the Air Force, Army, Navy, DISA, VA, Fortune 50 and
Fortune 500 companies.
He works with the Lockheed Martin SOA
Competency Center and the Web Services Factory to keep abreast of the
current state and future direction of SOA. On the GCSS-AF Program, Mike has
served as the as the Chief Architect, Systems Engineering Manager,
Production Operations Chief Engineer and Lead Developer. On behalf of his
customers, he works directly with major vendors including IBM, Oracle,
Microsoft, EMC, VMWare, RedHat and others providing input to influence the
direction of their future product features and offerings. Mike’s interests related
to SOA include enterprise architecture, SOA infrastructure, ITIL service
management, practical governance, Web service high availability design and
performance.
1:20-1:40
Presentation: Enterprise Solution-Supply (ES-S) Case Study
This presentation will focus on the Enterprise Solution-Supply (ES-S)
application, which is a service-based architecture deployed within the GCSSAF IF.
Presentation highlights:
o
o
o
An overview of ES-S from a service perspective
How ES-S works under the hood (the implementation)
Provide lessons-learned from the ES-S project
Presenters: Mr. Paul S. Saladna & Mr. Alain D. Nicolet, Keane Federal Systems
Paul S. Saladna is an architect with Keane Federal Systems, Inc and the lead
architect for the ES-S application. His technical experience covers a wide
range of industries from retail to consumer products, to public health, and the
DoD. He is a strong advocate of open source technologies and holds a MBA
with a concentration in Electronic Commerce.
Alain D. Nicolet is an architect with Keane Federal Systems, Inc and the
technical lead and Integrator for the ES-S application. His experience covers a
wide range of industries from the DoD (Navy, Air Force) and NASA to
commercial B2B frameworks and the airline industry.
1:40-2:00
Topic Q&A Session
2:00-3:00 SESSION TOPIC: Dashboard Solutions
2:00-2:20
Presentation: GCSS-AF Data Services Reporting Framework
This session will provide an overview of the GCSS-AF Data Services Reporting
Framework, which is a collection of design patterns based on user-centered design
best practices as well as a reusable framework from which developers can leverage
RIA (Rich Internet Application) components to create compelling user experiences
and SOA architecture to access and expose data as web services. The Reporting
Framework was initially fielded in 2006 to meet the A4 community's Dashboard
Reporting needs for aircraft maintenance data and has since been reused and
expanded to vehicles, equipment, munitions, supply, and transportation as well as
the Positive Inventory Control (PIC) initiative.
Presenters: Mr. Tony Tran & Mr. Scott Peterson, Roundarch
Tony Tran is a Vice President with Roundarch, an IT consultancy specializing in
strategy, user experience, and technology. He has over fourteen years of consulting
experience, primarily focused on web-based strategies & solutions including portals,
content management, knowledge management, and business intelligence/analytics.
Tony has spent the better part of the past 7 years dedicated to the GCSS-AF
program supporting both the AF Portal and Data Services. Most recently, Tony
helped the U.S. Air Force quickly adopt RIA (Rich Internet Application) technologies
to enhance its Portal and Collaboration tools, as well as evolve its Data Reporting
and Business Intelligence capabilities. Tony holds a B.S. in Mechanical Engineering
from The University of Illinois (Urbana-Champaign).
2:20-2:40
Presentation: Dashboards on Demand
This presentation will focus on successful strategies for employing dashboards
in any domain, with examples from the C2 World:
Presentation highlights:
o
o
o
o
Overview of technical approach and architecture along with quick
exposure to the myriad other possible approaches (literally hundreds
of products and approaches emergent in this space)
Provide insight into Accenture’s “30-day” sprint delivery process
Provide example views from our Command and Control customers
Although the capabilities we’ve implemented to date operate solely on
the SIPRNET, we intend to have some demonstration capability for
MITS via the CIE
Presenter: Mr. Jim Stogdill, Accenture
Jim Stogdill is the CTO of Accenture Mission Services where he focuses on
technology direction and client solution development. In addition to his work on
specific client engagements, he spends a great deal of time advocating open source
software, exploring ways Web 2.0 can contribute to DoD NetCentricity, and
attempting to prove that an agile, generative, and secure environment can be
achieved for the department. Prior to joining Accenture he built B2B reverse auction
systems for a major sourcing and procurement firm, brought heuristic-based
optimization and online trading to the corporate treasury for a leading edge financial
services firm, and traveled the world as a Naval Officer. Unfortunately from his
vantage point it all looked like the inside of a submarine. He spends his free time
hacking silver halides with decidedly low-tech gear.
2:40-3:00
Topic Q&A Session
3:00-3:30 BREAK
3:30-4:00 SESSION TOPIC:
Supporting Collaboration in Software Development
3:30-3:50
Presentation:
Collaborative software development is becoming increasingly important in the
practice of software delivery, particularly with the cross-boundary nature of SOA
development efforts. A high level of collaboration is critical because the software
development process remains fundamentally difficult. The difficulty is due, in part, to
shifting requirements and other real-time changes. It is also due to the complexity of
the products and services being delivered. Today's AF and DOD development
teams are often geographically or organizationally distributed. All these factors
require development teams to communicate and monitor progress throughout the
development lifecycle.
Presentation highlights:
o
o
o
Provide an overview of currently implemented AF collaborative tools and
capabilities including the AFMC Enterprise Information Management (EIM)
based 554 ELSW Software Developer’s SharePoint Site and the 554 ELSW
Software Developer’s CoP that can be used to foster collaboration in SOA
related development efforts
Specific collaborative capabilities, including implemented tools such as
discussion boards, wikis, blogs, document management, external partner
collaboration, shared calendars, taskings and alerts
A way ahead for identifying and resolving key issues in further advancing
developer collaboration across the AF & DoD
Presenter: Mr. Scott Raley, 643 ELSS
Scott Raley is a Software Architect with the 643rd Electronic Systems
Squadron (643 ELSS). He has over 20 years of software design and
development experience. He started as a programmer with the USAF and has
subsequently held positions as a Application Designer, Systems Analyst, Test
Manager, and Project Manager. He has led a number of application
development teams while working for the USAF and the DoD and his recent
experience includes serving as the lead architect for the Air Force Service
Oriented Architecture Initial Infrastructure Build (AF SOA IIB) Program. He
regularly presents SOA and Web Service seminars to 554 ELSW personnel
providing an overview of SOA & WS concepts and issues related to
successfully implementing SOA based applications. He has a Bachelor’s
Degree in English from Troy University Montgomery and a Master’s Degree in
Business Administration from Touro University.
3:50-4:00
Topic Q&A Session
4:00 Closing Remarks
Mr. Olan Waldrop, President Montgomery AFCEA Chapter
Download