Security Enforcement on Web Services Compositions
Laila Boumlik, Mohamed Mejri · 2019
Web services (WS) composition is the center of many different types of information systems such as e-commerce, financial and healthcare systems, where sensitive data are shared, which raises important security problems. WSBPEL is a standard to specify business processes, however, this orchestration language does not support users to meet their security requirements. This paper proposes a formal and automatic approach for enforcing security policies in WS composition. More precisely, given a composition of WSs written in WS-BPEL and a security policy specified in the LTL logic, this paper aims to generate a new version of the services that respects the security policy. The LTL policy is transformed to a new service that can monitor some activities of the others.