# A Survey on Intrusion Detection Systems for Fog and Cloud Computing
## 2 Security Overview  
### Service-Oriented Systems, Applications, and Security  
According to IBM, service-oriented systems are 'described as an approach that enables software components to be interoperable and reusable through service interfaces'. This technology works by integrating services into applications using general interface standards and architectural patterns [5; 6]. These systems are used primarily for web services and demonstrate significant importance, focusing on the many benefits it provides, including reliability, location independence, scalability, platform independence, reusability, agility, and easy maintenance. Recent academic literature [7] shows the deployment of service-oriented systems and their scale in the real world for software, AI, big data, and Internet of Things as services. The paper introduces service-oriented computing, as well as the essentials in service-oriented software development. Throughout the literature, the authors then move on to discussing the dependability of service-oriented software, including quality of service and reliability properties, security issues for SOA software, and reputation management systems. In further literature, we can evaluate the security of service-oriented systems [8]. The paper focuses on multiple factors for devising countermeasures for SOA vulnerabilities. The factors include protocols, network paths, vulnerabilities, automotive attacks, and comparison to IT security. The countermeasures that can be deployed include firewalls, intrusion detection systems and identity and access management. Finally, throughout relevant work, this paper conveys the further opportunities currently available for this technology [9]. We can see the future landscape for service-oriented systems and the horizon for this technology. The authors discuss future directions for research in this domain, including businesses and society, services in organizations, services for software-defined networks, services for the Internet of Things (IoT), services in the cloud or on the edge, services and data, and service engineering and management. Service orientation is a methodology for developing software systems that emphasizes standardization, well-defined interfaces, platform independence, as well as tool support (that even facilitates the integration of legacy systems). In [10], the authors investigate the use of service-oriented architecture for 5G systems. By adopting service aggregation and caching (SAaC) schemes, the network traffic congestion can be reduced, and network administration can be simplified. The Network model consists of multiple layers of architecture--these layers include the data acquisition layer, network routing layer, data center, and application layer. To conclude, service-oriented systems provide a successful measure to reduce the data transmission volume. In other recent literature [11], the authors explore the cyber threat landscape when using a service-oriented architecture focusing on the threat modeling phase of attacking and defending a system. The research proposes that the users take some responsibility for thinking about the attack vectors and threat actors, which is usually formally a task of the internet service provider (ISP). The cloud services are described as having four generic properties: data storage, data processing, data transfer, and authentication. The usual method of cyber threat analysis is to take all four properties as the basis for analyzing a select number of threats that apply to cloud services. However, the authors state that while this approach is useful, it falls short of comprehensively analyzing the full computing environment. In a study, the researchers examined the current process for intrusion detection and prevention in service-oriented vehicular networks [12]. They began by looking at common attacks associated with service-oriented networks: Sybil attacks, DoS attacks, and False alerts generation attacks.