Security Based Service Oriented Architecture in Cloud Environment

Service Oriented Architecture is appropriate model for distributed application development in the recent explosion of Internet services and cloud computing.SOA introduces new security challenges which are not present in the single hop client server architectures due to the involvement of multiple service providers in a service request. The interaction of independent services in SOA could break service policies. User in SOA system has no control what happens in the chain of service invocations. Even if the establishment of trust across all involved partners is required as a precondition to ensure secure interactions, still a new end to end security auditing mechanism is needed to verify the actual service invocation. We provide solution for end-to-end security auditing in service oriented architecture. This security architecture introduces two new components called taint analysis and trust broker. It also taking advantage of WS-security and WS-Trust standards. These components maintain session auditing and dynamic trust among services. The solution of these services allows auditing of inheritance services without modification. We also implemented model of the future approach. We also established its efficiency in Amazon EC2 and multi tenancy cloud computing infrastructure.