Service-oriented Assurance - Comprehensive Security by Explicit Assurances --