SOA Security

Service-oriented architecture (SOA) allows different ways to develop applications by combining services. The main premise of SOA is to erase application boundaries and technology differences. As applications are opened up, how we can combine these services securely becomes an issue. Traditionally, security models have been hardcoded into applications and when capabilities of an application are opened up for use by other applications, the security models built into each application may not be good enough.

Several emerging technologies and standards address different aspects of the problem of security in SOA. Standards such as WS-Security, SAML, WS-Trust and WS-SecurityPolicy address the security problem for SOA implementations that use Web Services. Technologies such as Application-oriented networking (AON) are addressing the problem of SOA security in the larger context as well.

Books on SOA Security

*
*
*
*