Model driven security frameworks for addressing security problems of Service Oriented Architecture

• Main Authors: Saleem, M. Q., Jaafar, J., Hassan, M.F.
• Format: Conference or Workshop Item
• Published: 2010
• Subjects: QA76 Computer software
• Online Access: http://eprints.utp.edu.my/2798/2/05561580.pdf; http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=5561580; http://eprints.utp.edu.my/2798/

Service Oriented Architecture (SOA) based on Web Services technology gained popularity because business work flows can easily be executed as an orchestration of Web Services. These Web Services are independently developed and may be internal or external. With increase in connectivity among the Web Services, security risks rise exponentially. Moreover the security requirements are not defined at organizational level rather they left until the technical level. Many security problems related to SOA applications are highlighted by different authors which if not properly managed might have serious consequences. Various Model Driven Security Frameworks are presented by different research groups to overcome the security problems of SOA based applications. In this paper we have highlighted the security problems for SOA based applications and few Model Driven Security Frameworks are presented to develop secure software applications; their working style and security goals are also discussed in the course of paper.