Rockwell Collins XML Security Case Study

1
Rockwell CollinsXML Security Case Study

• Andrew Nash
• Chief Technology Officer
• March 2006

2
Introduction to Rockwell Collins

• Aviation Electronics and Airborne / Mobile
  Communications Systems for Commercial and
  Military Applications Worldwide
• Communications
• Navigation
• Automated Flight Control
• Displays / Surveillance
• Aviation Services
• In Flight Entertainment
• Integrated Aviation Solutions
• Information Management Systems

• 2005 Annual Sales of 3.45B
• 17,000 employees worldwide

3
Moving to SOA

• Motivation for Project
• Customers demanded self-service
• Repair status and inventory availability
• Global customer base wants 24/7 scheduling
  availability
• Augment portal with system to system capabilities
• Detailed Implementation Requirements
• No changes to back-end service and repair systems
• Improve SLAs by offloading expensive operations
• Fast deployment time
• Application layer security
• Threat mitigation
• Identity integration
• Access control

4
Use Case - Rockwell Collins
Enterprise Perimeter
Intra-enterprise
Inter-enterprise

• Cross-platform services

Trust message?
SAP
Authorized for that data?

• B2B Services
• Real-time portal services

Customer Status
Portal
How do we deal with that identity?
Repair Status
Portal
5
Rockwell Collins
Rockwell Collins
Customers
HTTP
DMZ
Reactivity Gateway
1
App Servers
3
App Servers
2

• Schedule maintenance
• Track support progress

4
2
Reactivity Gateway-D
4
1
Network Firewall
Network Firewall
3
Extranet Portal Server
App Servers
User Browser access
Identity Mgt Infrastructure
6
Rockwell Collins Results

• Architected and implemented services
• 2 months
• Deployed Reactivity in production service
• 6 Weeks from contract
• Projects in next 12 months targeted to utilize
  platform
• 8 projects
• Estimated savings from first two additional
  projects
• gt 70K

7
Rockwell Collins Recommendations

• Strategy
• Start, start small, and build success
• Minimize capital expenditure
• Re-use Anti-Virus, IDS, LDAP, Cert Authority,
  UDDI
• Augment existing tools with specialized SOA tools
• XML and SOA Security Gateways
• Create business and IT advocates
• Consistently apply the architecture to solutions
  delivery