Securing business operations in an SOA

TL;DR

This paper discusses innovative security solutions and governance frameworks developed for service-oriented architectures to address security and dependability challenges, including identity federation, access management, secure messaging, and policy governance.

Contribution

It introduces new security and governance mechanisms tailored for SOA, with validation steps for their functionality and performance.

Findings

Enhanced identity federation and access management techniques

Context-aware secure messaging and routing solutions

Validated security policies for SOA environments

Abstract

Service-oriented infrastructures pose new challenges in a number of areas, notably with regard to security and dependability. BT has developed a combination of innovative security solutions and governance frameworks that can address these challenges. They include advances in identity federation; distributed usage and access management; context-aware secure messaging, routing and transformation; and (security) policy governance for service-oriented architectures. This paper discusses these developments and the steps being taken to validate their functionality and performance.