Web Services Security: What's Required to Secure a Service-Oriented Architecture
As organizations move to adopt SOA, they face a new set of requirements in their security landscape. The nature of SOA's loosely-coupled connections and use of open access have the potential to leave data unprotected, especially during multi-step transactions. As a result, there is a need to address more specific SOA security challenges by relying on additional, application-level industry standards. This paper describes a holistic approach to SOA security that externalizes security outside applications and web services, combines transport-level and application-level protection, and utilizes a layered defense system.
