Software security and SOA: danger, Will Robinson!
Jeremy Epstein, Scott Matsumoto, Gary E. McGraw · IEEE Security & Privacy · 2006
The current buzzword of choice among the technical elite (at least those subject to marketing departments) is service-oriented architecture, or SOA (pronounced 'SO-uh'). As SOA moves from hype to practice, an opportunity exists to do security right, but a similar opportunity exists for disaster if security is done wrong. This article describes 13 snares that we must avoid to end up with SOA security that makes sense.