IT:AD:WCF/Security

• Asset: something worth protecting.
• Threat: a potential issue, due to:
• Vulnerability: a weakness
• Attack: exploitation of vulnerability.

• Confidiality
• Integrity (both ways)
• Availability

By

• Authentication
• Authorization
• Auditing (non repudiation)

• Componentized (small units of service)
• Composable
• Message based (message contract and schema)
• Distributable (same machine or remote machines)
• Discoverable (WSDL/MEX)