Architecturally, SOA poses several unique challenges for application security. As companies move toward the SOA ideal of open, self-describing, and loosely-coupled applications, they also must expose critical data across corporate boundaries and eventually to partners, customers, and, potentially, criminals. Enterprises must also contend with a restrictive regulatory environment that increases requirements for secure, auditable accounting throughout the system. For these reasons, security can be seen as the primary limiting factor in the expansion of SOA.
To meet these requirements, enterprises need to apply non-invasive, externalized security policy enforcement mechanisms consistently throughout their SOA ecosystems, while also centrally managing security policy. Organizations that have been successful in these efforts have adopted a policy-driven approach to SOA governance that enables them to "think globally" about security, while letting the system "act locally" to enforce policy.
What You'll Learn from Attending this Webcast:
- Solutions to the security challenges created by loosely-coupled, federated, services-oriented systems
- Innovative strategies for leveraging existing security infrastructure to secure SOA
- A pragmatic security roadmap for companies planning to roll-out SOA
|