Abstract:In service oriented architecture (SOA) environment, the communication and infrastructure security is crucial. The most important specification addressing Web services security is WS-Security, which collaborates with the SOAP message specifications, providing integrity, confidentiality and authentication for Web services. However, WS-Security focuses SOAP message security between trusted partners. In SOA applications, there are other vulnerabilities which can be exploited to attack by anonymous customer or even trusted partners, and these vulnerabilities do not gain enough attention as WS-Security. Among them, denial-of-service (DoS) is one attack cluster, which exhausts computer and network resources and reduces the availability of Web services. Another one is sensitive data leakage in a specific application domain. In this paper, the security of SOA applications is viewed as the security domain and a three-tier domain was divided based on security domain analysis. For each security sub-domain, security requirement scenario and requirements are presented. The security domain models were given which can be used to build up security services for sub-domain. Based on security model and security service assets, which can evolve along with understanding on security domain, the developers can establish the security implementation for SOA application integration.

Security Analysis for Soa-Sca Based Sdo and Solutions for 3 Capability Problems

Construction of security architecture of web services based EAI

An Authentication and Authorization Solution Supporting SOA-based Distributed Systems

A Role-Based SOA Architecture for Community Support Systems

The Simple Object Access Protocol In Web Services Architecture

Multi-Tier Security Feature Modeling for Service-Oriented Application Integration

Security Architecture For Web Services

Security Model For Service-Oriented Architecture

The Research of Security Asynchronous Web Services Based on SOA Architecture

Data provenance in SOA: security, reliability, and integrity

The study of data-oriented and ownership-based security architecture in open internet environment

Web Services Single Sign-on Protocol and Formal Analysis on It

A Permission Management Model in Service-Oriented Architecture

SOA-based Cross-Domain Access Control for Enterprise Applications

Research of Data Security of Distributed System-based Web Services

Soap Security Extension Based on Apache Cxf

Service -Oriented Role -Based Access Control

Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

Desiging a logical security framework for e-commerce system based on soa

A SECURE MODEL OF WEB SERVICE BASED ON THE EXPANSIBILITY Of SOAP

A Novel Remote Attestation Platform for Soa