Logo des Repositoriums
 
Zeitschriftenartikel

Service Oriented Security Architecture

Lade...
Vorschaubild

Volltext URI

Dokumententyp

Text/Journal Article

Zusatzinformation

Datum

2009

Zeitschriftentitel

ISSN der Zeitschrift

Bandtitel

Verlag

Gesellschaft für Informatik e.V.

Zusammenfassung

As Service Oriented Architectures (SOA) and Web services are becoming widely deployed, the issue of security is far from being solved. In an attempt to address this issue, the industry proposed several extensions to the SOAP protocol that currently reached different levels of standardization. However, no architectural guidelines have yet been proposed. In this paper we first outline the security challenges and the specifications that address these challenges and then present our concept the Service Oriented Security Architecture—SOSA. We argue that the different security functions (authentication, authorization, audit, etc.) should be realized as different stand-alone Web services These security services can then be chained together by means of Enterprise Application Integration (EAI) techniques such as message routing on Enterprise Services Buses (ESB). Next, we will present a prototypical implementation of this framework and describe our experiences so far. We show that by distributing the security functions, a more flexible architecture can be designed that would lower the costs associated with implementation, administration and maintenance.

Beschreibung

Opincaru, Cristian; Gheorghe, Gabriela (2009): Service Oriented Security Architecture. Enterprise Modelling and Information Systems Architectures - An International Journal: Vol. 4, Nr. 1. DOI: 10.18417/emisa.4.1.4. Berlin: Gesellschaft für Informatik e.V.. PISSN: 1866-3621. pp. 39-48

Schlagwörter

Zitierform

Tags