Naslov
Service Oriented Security

Autori
Gerić, Sandro ; Hutinski, Željko

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
Proceedings of the 30th MIPRO 2007 International Convention / - Rijeka, 2007

Skup
MIPRO 2007

Mjesto i datum
Opatija, Hrvatska, 21.05.2007. - 25.05.2007

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
sos; web services; security; soa

Sažetak
Service-oriented architecture (SOA) is a set of principles for designing extensible, federated and interoperable services, and it represents a new evolutional spiral in the program-applications development and in the evolution of the information systems concept. Development and increase number of SOA implementations brings out the SOA based information system security issues that somehow differ from "traditional" information system security principles. There are different aspects of security in service-oriented architecture. Some are oriented and based on technical standards that are used for SOA's fundations, some are oriented towards organizational and legislative issues of SOA's security policy, aspects of security issues based on inter-organizational cooperation, etc. In this article we address the question of security threats and risk in using SOA (SOA threat model), different security and risk management options that could be implemented, and we give an overview of a ISO/IEC 17799 security model components that can be used in securing service-oriented architectures.

Izvorni jezik
Engleski

Znanstvena područja
Informacijske i komunikacijske znanosti

POVEZANOST RADA