Oracle Fusion Middleware is a portfolio of customer-proven software products that enable organizations to run, secure, adapt, and expand their business.

For the most part, things that you do to secure a Web site can be used to secure a Web Service. If you need to encrypt the data exchange, you use Secure Sockets Layer (SSL) or a Virtual Private Network to keep the bits secure. For authentication, use HTTP Basic or Digest authentication with Microsoft® Windows® integration to figure out who the caller is.

SharePoint Portal Server is a portal server that connects people, teams, and knowledge across
business processes. SharePoint Portal Server integrates information from various systems into one
secure solution through single sign-on and enterprise application integration capabilities. It
provides flexible deployment and management tools, and facilitates end-to-end collaboration
through data aggregation, organization, and searching. SharePoint Portal Server also enables users
to quickly find relevant information through customization and personalization of portal content
and layout as well as through audience targeting.

SharePoint-based Web sites can be password-protected to restrict access to registered users, who
are invited to join via e-mail. In addition, the site administrator can restrict certain members' roles
by assigning different permission levels to view post and edit.

Microsoft Windows SharePoint Services Technical security measures provide firewall protection,
intrusion detection, and web-publishing rules. The Microsoft operation center team tests and
deploys software updates in order to maintain the highest level of security and software reliability.
Software hot-fixes and service packs are tested and deployed based on their priority and level of
risk. Security related hot-fixes are rapidly deployed into the environment to address current
threats. A comprehensive software validation activity ensures software stability through regression
testing prior to deployment.

Secure Socket Layer. A security protocol that provides privacy over the Internet. The protocol allows client-server applications to communicate in a way that cannot be eavesdropped upon or tampered with. Servers are always authenticated, and clients are optionally authenticated.