Cross-organizational security - The service-oriented difference

Abstract

Service-oriented Architectures (SOA) are a powerful paradigm to address integration challenges for information technology systems in enterprises. The service-based integration of legacy systems and business partner systems makes it necessary to introduce and adapt suitable SOA security measures in order to secure the enterprise both within and for cross-organizational collaboration. While there is an active research community for SOA security, standard literature on the topic has not yet identified the influence of the SOA paradigm on security aspects in a structured manner, especially in an enterprise context. In our paper, we work towards this goal by identifying the main elements of cross-organizational SOA in the form of a conceptual model and by discussing these elements regarding their impact on security issues. Based on this, research challenges for SOA security are defined and structured. © 2010 Springer-Verlag.