Follow Us on:

• About
• Leadership
• News
• Events
• Careers
• Contact Us
• Environmental

SOA Security: How a Lil' Irish Luck Went a Long Way David Yeates, IT Head for EBS Building Society, gives an overview of the Irish financial firm's approach to securing its service oriented architecture (SOA) CSO Online 6th May, 2008 By Bill Brenner, Senior Editor

full  podcast here ...

From a security perspective, service oriented architecture (SOA) is a tricky thing. It's not hard for bad guys to compromise it with SQL injection, capture-replay and XML denial-of-service attacks, which they can ultimately use to bust through walls around a company database.

As Acumen Solutions' Igor Khurgin, SOA practice manager, and Saurabh Verma, director global services, explained in a recent CSOonline column: "Adopting services oriented architecture (SOA) in your enterprise without thinking through IT governance can cause something like the Gold Rush in the 1800s; extreme rates of growth and minimal law and order which produce unexpected outcomes." Mark O'Neill, CTO at XML network management company Vordel, also spells out the risks in SOA Security: The Basics.

The EBS Building Society, one of Ireland's largest financial services companies, wanted SOA for its ability to quickly model (and change) business processes. And it's IT Head David Yeates' responsibility to secure the resulting architecture. Below, he explains the process his company took to achieve secure SOA.