Automatic Composition of Services with Security Policies

Yannick Chevalier 1, 2 Mohammed Anis Mekki 2 Michael Rusinowitch 2
2 CASSIS - Combination of approaches to the security of infinite states systems
FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies, INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : Automatic composition of web services is a challenging task. Many works have considered simplified automata models that abstract away from the structure of messages exchanged by the services. For the domain of security services (such as digital signing or timestamping) we propose a novel approach to automated composition of services based on their security policies. The approach amounts to collecting the constraints on messages, parameters and control flow from the components services and the goal service requirements.??A constraint solver checks the feasability of the composition — possibly adapting the message structure while preserving the semantics — and displays the service composition as a message sequence chart. The resulting composed service can be verified automatically for ensuring that it cannot be subject to active attacks from intruders. The services that are input to our system are provided in a declarative way using a high level specification language. The approach is fully automatic and we show on a case-study how it succeeds in deriving a composed service that is currently proposed as a product by OpenTrust.
Type de document :
Communication dans un congrès
Web Service Composition and Adaptation Workshop (held in conjunction with SCC/SERVICES-2008), Jul 2008, Honolulu, United States. IEEE, pp.529-537, 2008, 〈10.1109/SERVICES-1.2008.13〉
Liste complète des métadonnées

https://hal.inria.fr/inria-00330338
Contributeur : Michaël Rusinowitch <>
Soumis le : mardi 14 octobre 2008 - 10:51:49
Dernière modification le : jeudi 15 février 2018 - 08:48:09

Lien texte intégral

Identifiants

Citation

Yannick Chevalier, Mohammed Anis Mekki, Michael Rusinowitch. Automatic Composition of Services with Security Policies. Web Service Composition and Adaptation Workshop (held in conjunction with SCC/SERVICES-2008), Jul 2008, Honolulu, United States. IEEE, pp.529-537, 2008, 〈10.1109/SERVICES-1.2008.13〉. 〈inria-00330338〉

Partager

Métriques

Consultations de la notice

361