SMS versenden: Security Engineering for Service-Oriented Architectures