Securing Service-Oriented and Event-Driven Architectures - Results of an Evaluation of Enterprise Security Frameworks

Abstract

With the emerging trend to (re-) design IT-systems as service-oriented and event-driven architectures new security paradigms are required. This position paper describes the various threats and measures against them. On this base evaluation results of securing a business process are presented. An outlook on future research work on combining Model-Driven techniques and security requirements on a higher modeling level will conclude the paper.