Is your organisation considering rolling out a Service Oriented Architecture (SOA)? Or are you already in the process of it? In either case it is critically important to consider the security and assurance implications early on. Only this way will you be able to minimise risks and to ensure the benefits of SOA

ObjectSecurity is an expert in SOA security. However narrow or broad your SOA definition of choice is, security plays an important role.

SOA & security best practice consulting

ObjectSecurity has been involved in a number of SOA best practice projects, including a project for the UK Ministry of Defence with QinetiQ. We can help you establish what governance, architecture, processes, and technologies need to be put in place for successful SOA roll-out in your organisation. While security is our specialisation, we have a broad understanding of security unrelated SOA issues.

Secure SOA consulting

In the narrow sense, you will need a good XML web services security architecture. Building such an architecture is a complex task because there are many security standards from many vendors and consortia, and it is important to choose products with stable and robust XML security standards that will be around for the forseeable future. In addition, it is necessary to choose a set of XML security standards that are interoperable. Compatible XML gateways and suitable backend infrastructure also needs to be selected and integrated carefully.

In the broadest sense, you are looking at agile integration and orchestration of IT services that match the business processes. Such an agile SOA architecture will only be successful if security can be guaranteed in the face of frequent re-organisationss. This can only be achieved if the SOA infrastructure (XML web services and/or other middleware) can be automatically be reconfigured and redeployed without breaking security.

ObjectSecurity has strong expertise in both these areas. We can help you develop a secure SOA architecture that meets your requirements. Together with our XML product partners we can also recommend a range of suitable products to implement the underlying (XML and non-XML) infrastructure.

ObjectSecurity's SOA security track record includes a consulting contract with QinetiQ for the UK Ministry of Defence.

In-depth study of SOA security management (using model-driven security)

ObjectSecurity's world-leading Model Driven Security (MDS) experts have just compiled the definitive in-depth 50-page resource about MDS in the context of SOA. It includes: Introduction - Problem definition - Model Driven Security (MDS) definitions and related work (research & vendors), MDS terminology and concepts, Benefits and differences to traditional approaches, MDS architectures overview, Implications of MDS for specific industries, MDS case study, Market trends, Future work, Conclusion. contact us to buy the study

Contact us for SOA security consulting services

TrustedSOA.org - blog.

www.trustedsoa.com