IEEE Security & Privacy · 2006 · 50 citations · 0 references
EngineeringUsable SecurityInformation SecurityWill RobinsonSoftware EngineeringSoftware AnalysisHardware SecuritySoa GovernanceManagementSystems EngineeringTechnical EliteSecurity ManagementSoa SecuritySecure By DesignService-oriented ArchitectureComputer ScienceSoftware DesignData SecurityCryptographyInformation Security ManagementSoftware SecuritySecurity GovernanceSecurityTechnologySystem Software
The current buzzword of choice among the technical elite (at least those subject to marketing departments) is service-oriented architecture, or SOA (pronounced 'SO-uh'). As SOA moves from hype to practice, an opportunity exists to do security right, but a similar opportunity exists for disaster if security is done wrong. This article describes 13 snares that we must avoid to end up with SOA security that makes sense.