A Framework for Developing Secure Application in Service – Oriented Architecture

Service Oriented Architecture (SOA) is one of the most popular concepts to implement different systems. However it faces many challenges in terms of security. As a result, anumber of standard and frame works are formed as supporters. The main purpose of this survey is to create amodel for a secure Service-oriented Architecture (SOA)based on a formal model specified in the Alloy modeling language.The proposed model is based on the basic SOA as well asCIA and include secure identities, secure interaction, secure publish and secure discover. To validate that our model issecure, we created an Alloy model for security. We create predicates that model our security definitions and the obstacles which violate these security definitions. Then weuse each security definition against the obstacle that violates it to define secure elements in our model

کلیدواژه ها:

SOA ، Confidentiality Integrity Availability (CIA) ، authentication ، authorization ، non-repudiation ، alloy