Securing access to information is basic to any application. Security becomes
even more critical for implementations structured according to SOA principles
due to their loose coupling of services and applications and their operation
across organizational boundaries. Such an environment often exposes the
delicacy or limitations of existing security implementations.
Irrespective of the efficiencies brought by model-driven development and
SOA-based service management, business applications must continue to secure
information. Merely securing the perimeter (such as firewalls and routers) is
insufficient, because an On Demand Business needs to be able to set up and
tear down dynamic trust relationships as relationships among its partners,
customers, and employees evolve. Thus,... (more)