IBM Addresses Web 2.0 Security Concerns With 'SMash'

  • By Dian Schaffhauser
  • 03/19/08

IBM announced new technology to secure "mashups," Web applications that pull information from multiple sources, such as Web sites, enterprise databases, or e-mails, to create one unified view. Mashups allow users to gain insight on complex situations but, as with all Web-based initiatives, security has been a concern.

IBM researchers have created a new technology, codenamed "SMash," short for secure mashup, that allows information from different sources to talk to each other, but keeps them separate so malicious code can't be introduced into systems.

IBM is contributing the SMash technology to the OpenAjax Alliance, an organization of vendors, open source projects and companies using AJAX, of which it is a part.

"Web 2.0 is fundamentally about empowering people, and has created a societal shift in the way we organize, access, and use information," said Rod Smith, IBM Fellow and vice president. "Security concerns can't be a complete inhibitor, or clients lose out on the immense benefit mashups bring. The same way you wouldn't buy a car and then later decide to have the seatbelts or airbags installed, as an industry we've learned how to build security into business operations from the ground up instead of tacking it on after the fact."

SMash addresses a part of the browser mashup security issue by keeping code and data from each of the sources separated, while allowing controlled sharing of the data through a secure communication channel. IBM said it plans to include SMash technology in WebSphere products and its commercial mashup maker, Lotus Mashups, expected in the summer. Lotus Mashups is IBM's first commercial mashup maker for organizations. It will allow non-technical users to create and share mashups in a secure way.

A detailed description of SMash will appear in the 17th International World Wide Web Conference, to be held in Beijing, China, in April 2008.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • illustration of a futuristic building labeled "AI & Innovation," featuring circuit board patterns and an AI brain motif, surrounded by geometric trees and a simplified sky

    Cal Poly Pomona Launches AI and Innovation Center

    In an effort to advance AI innovation, foster community engagement, and prepare students for careers in STEM fields and business, California State Polytechnic University, Pomona has teamed up with AI, cloud, and advisory services provider Avanade to launch a new Avanade AI & Innovation Center.

  • black graduation cap with a glowing blue AI brain circuit symbol on top

    Report: AI Is a Must for Modern Learners

    A new report from VitalSource identifies a growing demand among learners for AI tools, declaring that "AI isn't just a nice-to-have; it's a must."

  • glowing shield hovers above a digital cloud platform with abstract data streams and cloud icons in the background

    Google to Acquire Cloud Security Firm Wiz

    Google has announced it will acquire cloud security startup Wiz. If completed, the acquisition — an all-cash deal valued at $32 billion — would mark the largest in Google's history.

  • digital dashboard featuring a shield icon, graphs, a world map, and network nodes

    IBM Introduces Agentic AI Governance and Security Platform

    IBM has launched a new software stack for enterprise IT teams tasked with managing the complex governance and security challenges posed by autonomous AI systems.