The short answer for SOA security problems is that you need to buy or develop a security solution for your SOA. :) OR you can do it self www.developer.com/design/article.php/10925_3607471_1