Title
Securing business operations in an SOA
Abstract
In order to achieve agility and shorter concept-to-market timescales for new products and services, ICT service providers and their corporate customers alike increasingly adopt a collection of technologies, concepts and capabilities which come under the banner of the Service Oriented Architecture (SOA). The Service Oriented Infrastructure (SOI) approach complements SOA by enabling the optimal use of virtualised infrastructure services and resources via the network, and their integration in tailored solutions that meet customer needs and adapt to their growth pattern. In this paper we focus on the business and technological challenges relating to security and service dependability for SOI. In particular the paper studies challenges in the security areas of (i) identity federation, (ii) distributed usage and access management, (iii) context-aware secure messaging, routing and transformation and (iv) SOA security governance. It gathers requirements and it proposes an architecture comprising design patterns and a governance framework that address these challenges. An example case-study presents an implementation of the proposed architecture's SOI security capabilities aiming at the practical validation of the proposed architectural concepts. Copyright (c) 2010 John Wiley & Sons, Ltd.
Year
DOI
Venue
2012
10.1002/sec.188
SECURITY AND COMMUNICATION NETWORKS
Keywords
Field
DocType
SOA,message oriented security,access management,federated identity,security governance
Dependability,Computer science,Computer security,Security service,SOA Security,Service provider,Federated identity,Service-oriented infrastructure,OASIS SOA Reference Model,Service-oriented architecture
Journal
Volume
Issue
ISSN
3
SP6
1939-0114
Citations 
PageRank 
References 
0
0.34
3
Authors
3
Name
Order
Citations
PageRank
Theo Dimitrakos148637.89
David Brossard2264.19
Pierre de Leusse3356.35