Exploring Security and Privacy Risks of SoA Solutions Deployed on the Cloud

It has been widely accepted that service oriented architecture (SoA), has been a promising approach for business development and growth. SoA principles (also known as SoA qualities) attempt to guide development, maintenance, and usage of the SoA. These principles provide benefits like: ease of reuse, service automation, and lowering integration costs. However, they can also lead to security issues. These issues are augmented especially when SoAs are deployed in multi-tenancy third party clouds. SoA has benefited from the existence of cloud computing (CC) as it provided SoA with a flexible deployment medium. However, the advantageous collaboration of SoAs and CC has led to a larger set of privacy and security issues (e.g. compliance issues, QoS issues). Additionally, we observe newer kinds of security and privacy risks that are now required to be monitored and mitigated. In this paper we highlight the security and privacy challenges associated with the utilization of the SoA principles on cloud based solutions. We identify the origin and severity of these issues followed by several recommendations to guide the utilization of SoA principles in off-premise clouds. Keywords— service oriented architecture, cloud computing,