Secure Service Orchestration

Abstract. We present a framework for designing and composing services in a secure manner. Services can enforce security policies locally, and can invoke other services in a “call-by-contract” fashion. This mechanism offers a significant set of opportunities, each driving secure ways to compose services. We discuss how to correctly plan service orchestrations in some relevant classes of services and security properties. To this aim, we propose both a core functional calculus for services and a graphical design language. The core calculus is called λreq [10]. It features primitives for selecting and invoking services that respect given behavioural requirements. Critical code can be enclosed in security framings, with a possibly nested, local scope. These framings enforce safety properties on execution histories. A type and effect system over-approximates the actual run-time behaviour of services. Effects include the actions with possible security concerns, as well as information...

• Type: Conference
• Year: 2007
• Where: FOSAD
• Authors: Massimo Bartoletti, Pierpaolo Degano, Gian Luigi Ferrari, Roberto Zunino
• Keywords: Core Functional Calculus, Driving Secure Ways, FOSAD 2007, Security