Security Issues for Intelligence Information System based on Service-Oriented Architecture

Security is important requirement for service-oriented architecture (SOA), because SOA considers widespread services on different location and diverse operational platforms. Main challenge for SOA Security still drifts around “clouds” and that is insufficient frameworks for security models based on consistent and convenient methods. Contemporary security architectures and security protocols are in the phase of developing. SOA based systems are characterized with differences in security implementation as an encryption, access control, security monitoring, security management through dissimilar domains etc. Domains have services as endpoints in the information systems, which usually form composite services. The workflow which is established through composite services is extending on different endpoints in different domains. This paper main aim is to give contribution in developing suitable security solution to Intelligence Information System using web service security standards in order to reach appropriate level of information security as an authentication, authorization, privacy, integrity, trust, federated identities, confidentiality and more. Our paper uses approach in which useful information provided by the services is send out directly from the creators of information to the consumers of information. We introduce security and logging system that can be used as verification and validation middleware