An Integrated Security Framework for SOA

Abstract:

In today's Web environment, Service Oriented Architecture (SOA) becomes an efficient paradigm to integrate distributed applications. Due to loosely coupled nature of SOA, security is one of the most important issues that must be considered in SOA-based environments. Most of the existing security solutions are proposed only from one certain point of view, and they are difficult to integrate together. In this paper, an integrated framework for SOA are proposed to provides an overall security solution, which contains a three-dimensional security model, a security architecture and related security standards.

• Periodical: Applied Mechanics and Materials (Volumes 427-429)
• Pages: 2151-2154
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.427-429.2151
• Online since: September 2013
• Authors: Ling Xia Liu*, Dong Xia Wang, Min Huan Huang, Rui Zhang
• Keywords: Architecture, Security, SOA

References

[1] J. Pajevski, M: A Security Model for Service Oriented Architectures. On http: /www. oasisopen. org/committees/download. php/17573/06-04-00008. 000. pdf. (2004).

[2] Youmans, J.: Methods of SOA Security Engineering and Certification. On http: /www. jeff-youmans. com/PPT/Youmans%20DoDIIS%20WorldWide%2008. ppt. (2008).

[3] Jamie Fiere: SOA Security. (Master thesis, Vrije Universiteit Amsterdam 2007).

[4] A., Ashley P., Borrett M., Lu M., Muppidi S., Readshaw N.: Understanding SOA Security Design and Implementation (Redbook, IBM 2007).

[5] Mehdi Sabbari, Hadiseh Seyyed Alipour: A Security Model and its Strategies for Web Services. International Journal of Computer Applications Vol. 36-10 (2011), pp.24-31.

[6] Jonnaganti, V: An Integrated Security Model for the Management of SOA (Master Thesis, University of Gothenburg Department of Applied Information Technology Gothenburg, Sweden 2009).

[7] Bo Wu: Research on Key Security Techniques of SOA (Master Thesis, National University of Defense Technology, China 2009).

[8] Defense Information Systems Agency: A Security Architecture for Net-Centric Enterprise Services (NCES) Version 0. 3 (Technical report, Defense Information Systems Agency 2004).

[9] GGF: Overview of the Grid Security Infrastructure. On http: /www. globus. org/security/overview. html.

[10] Foster I., Kishimoto H., Savva A.: The Open Grid Services Architecture, Version 1. 5 (Technical report, Global Grid Forum 2006).

[11] Gunnar Peterson: Service Oriented Security Architecture. Information Security Bulletin Vol. 10 (2005), p.325–330.

[12] Opincaru, C., Gheorghe, G.: Service Oriented Security Architecture. Enterprise Modelling and Information Systems Architectures Vol. 4-1 (2009), p.39–48.

[13] Sandro Gerić: Security of Web Services based Service-oriented Architectures. In: MIPRO 2010, p.1250–1255. IEEE Press, Croatia (2010).