This session looks at applying the complete lifecycle of a Security Architect's job dealing with Web Services Threats and Countermeasures. In this session, industry security expert Gunnar Peterson develops a Web service Threat model and show how access control and SAML can mitigate spoofing and elevation of privilege attacks. Then to deal with injection and snooping threats, Gunnar outlines content validation and encryption controls that must be applied. Following Gunnar, Intel shows how an Architect can decouple security logic from application servers to create, manage and enforce security policies using a Service Gateway.