Abstract
M.Sc.
Threats to information assets have increased significantly since the adoption of Service Oriented Architecture (SOA). Gone are the days when organisations could just secure the perimeter of their applications. The study adopted a threat vulnerability control framework and game theory as a theoretical lens. It investigated the various facets behind decision making under uncertainty in SOA and the perceived industry best practices. Game theory is a way to model complex SOA security interactions under uncertainty. Intelligent attackers require intelligent analysis. Game theory helps us implement strategies that take into account the attackers’ intentions since it can be applied in situations of uncertainty. The data was collected primarily through semi structured interviews at a Top I.T company based in Sandton. Grounded theory techniques were employed as a chief methodology for data analysis...