A Security Framework for Service Oriented Architectures

The client/server approach is giving way to the concept of service oriented architectures (SOA). The main idea behind SOA is to provide services rather than access to systems, thus enabling better collaboration both inside a domain and cross domains. However, service oriented architectures naturally opens new challenges to security. In this paper, the security requirements are described, and a security framework is presented as part of a security architecture for network centric environments.