Security auditing in service oriented architecture

Service oriented architectures (SOA) introduce new security challenges not present in the single-hop client-server architectures due to the involvement in multiple service providers in a service request. Considering the additional security threats on SOAs, the interactions of independent service domains could violate service policies or SLAs. We provide an efficient solution for auditing service invocations in SOA. This solution is transparent to the services, which allows using legacy services without modification. Moreover, we are investigating the transition to the cloud computing.