This week, ZapThink published a white paper, “SOA Security: Centralize & Integrate.” Essentially, it’s a case study about systems integrator SAIC’s SOA implementation for an oil and gas company. As part of the project, SAIC created an SOA security architecture for a business-to-business environment.

Though the white paper focuses only on SAIC’s solution, it offers a quick overview of the problem and one way to address it that should prove useful to anyone interested in SOA security.

The article may be helpful, too, if your organization is still planning SOA, since it looks at the security pros and cons of using REST versus SOAP. (Hint: WS-Security doesn’t work with REST. Google and Amazon solved the problem with security tokens.)

Read more at: IT Business Edge