Authors:
Luca Pino
1
;
George Spanoudakis
1
;
Andreas Fuchs
2
and
Sigrid Gürgens
2
Affiliations:
1
City University London, United Kingdom
;
2
Fraunhofer Institute for Secure Information Technology, Germany
Keyword(s):
Software Services, Secure Service Compositions, Security Certificates.
Related
Ontology
Subjects/Areas/Topics:
Artificial Intelligence
;
Business Process Management
;
Cloud Computing
;
Communication and Software Technologies and Architectures
;
e-Business
;
Enterprise Engineering
;
Enterprise Information Systems
;
Knowledge Management and Information Sharing
;
Knowledge-Based Systems
;
Languages, Tools and Architectures
;
Model-Driven Software Development
;
Service Composition and Mashups
;
Service Discovery
;
Service-Oriented Architectures
;
Services Science
;
Services Security and Reliability
;
Software Engineering
;
Symbolic Systems
;
Technology Platforms
Abstract:
Security is an important concern for service based systems, i.e., systems that are composed of autonomous and distributed software services. This is because the overall security of such systems depends on the security of the individual services they deploy and, hence, it is difficult to assess especially in cases where
the latter services must be discovered and composed dynamically. This paper presents a novel approach for discovering secure compositions of software services. This approach is based on secure service orchestration patterns, which have been proven to provide certain security properties and can, therefore, be used to generate service compositions that are guaranteed to satisfy these properties by construction. The paper lays the foundations of the secure service orchestration patterns, and presents an algorithm that uses the patterns to generate secure service compositions and a tool realising our entire approach.