SOA Security
From Wikipedia, the free encyclopedia
 |
This article or section is written like an advertisement. Please help rewrite this article from a neutral point of view per Wikipedia policy. Mark blatant advertising for speedy deletion with {{db-spam}}. (help, talk) |
Modern enterprises cannot possibly work without the aid of IT applications. However, for quite some time now, IT has become a problem for enterprises. The inability of IT applications to change as fast as business models do has held back enterprises from taking full advantage of business opportunities. Worse, IT applications cost a lot to build and maintain. Service-oriented architecture (SOA) addresses these problems but in the process, brings up really ticklish security questions.
In order to address the problems of inflexibility and high expense in IT, SOA de-emphasizes application boundaries and technology differences. With SOA, capabilities of every IT application are available for use by every other application. Enterprises can quickly put together composite applications that combine the capabilities of existing applications in different ways to meet the changing business models of an enterprise. But in doing so, enterprises run into the problem of security. Traditionally, security models have been hardcoded into applications and when capabilities of an application are opened up for use by other applications, the security models built into each application may not be good enough.
Several emerging technologies and standards address different aspects of the problem of security in SOA. Standards such as WS-Security, SAML, WS-Trust and WS-SecurityPolicy address the security problem for SOA implementations that use Web Services. Tehnologies such as Application-oriented Networking (AON) are addressing the problem of SOA security in the larger context as well.
[edit] Books on SOA Security
- Kanneganti, Ramarao; Prasad A. Chodavarapu (2007). SOA Security in Action. Manning Publications. ISBN 1-932394-68-0.
- Rosenberg, Jothy; David Remy (2004). Securing Web Services with WS-Security: Demystifying WS-Security, WS-Policy, SAML, XML Signature, and XML Encryption. SAMS. ISBN 0672326515.
- Hartman, Bret; Donald J. Flinn, Konstantin Beznosov, Shirley Kawamoto (2003). Mastering Web Services Security. Wiley. ISBN 0471267163.
- O'Neill, Mark (2003). Web Services Security. McGraw-Hill Osborne Media. ISBN 0072224711.
