Intruder Detection System Architecture for an SOA-Based C4I2SR System

Finnish Defence Forces have planned to develop their future information systems according to Service-Oriented Approach/Architecture (SOA). The main ideas for SOA are designed for business applications, for example, services are called according business processes and may be discovered with the help from service registries. The concepts will have a slightly different role in military applications. While SOA includes security standards at an application/message level, the requirements raising from military use are not fulfilled by SOA mechanisms alone. For example, intrusion detection systems are missing. This paper suggests architecture for an Intrusion Detection System, where service invocations originating from "business" processes are identified by one-time passwords. User authentication functionality is combined with the service registry. We have described the threats, against which the suggested system protects, and the additional features of this fairly lightweight solution.