Explain the SOA framework. Why is it difficult to secure the SOA architecture? What are the recommended principles to secure an SOA? Why?

Explain the SOA framework. Why is it difficult to secure the SOA architecture? What are the recommended principles to secure an SOA? Why?