Securing Enterprise Applications: Service-Oriented Security (SOS)

Author

Farkas, Csilla ; Huhns, Michael N.

Author_Institution

Dept. of Comput. Sci. & Eng., Univ. of South Carolina, Columbia, SC

fYear

2008

fDate

21-24 July 2008

Firstpage

428

Lastpage

431

Abstract

Some of the characteristics that make service-oriented architectures appealing for enterprise applications also make them vulnerable to security breaches. The vulnerabilities are primarily due to the openness of the service-execution environment, to the dynamic run-time selection and composition of services, and to the autonomy of the individual services. In this paper, we describe these vulnerabilities and discuss ways of mitigating them. Such ways include software agent technology and distributed database transaction semantics.

Keywords

distributed databases; security of data; software agents; software architecture; distributed database transaction semantics; dynamic run-time selection; enterprise applications; service-execution environment; service-oriented architectures; service-oriented security; Application software; Authentication; Communication system security; Data security; Identity management systems; Information security; Semiconductor optical amplifiers; Service oriented architecture; Web services; XML; SOA; security; semnatics; software agents; transactions;

fLanguage

English

Publisher

ieee

Conference_Titel

E-Commerce Technology and the Fifth IEEE Conference on Enterprise Computing, E-Commerce and E-Services, 2008 10th IEEE Conference on

Conference_Location

Washington, DC

Print_ISBN

978-0-7695-3340-7

Type

conf

DOI

10.1109/CECandEEE.2008.151

Filename

4785102