Monitoring Security in Service Compositions
Enforcing the secure execution of BPMN-based service composition required a flexible monitoring and enforcement approach that allows to control the compliance of the highly dynamic system during run-time.
To address the challenges crated by combining loosely coupled services that are offered and operated by different service providers, we developed a framework for monitoring services at run-time and ensuring that services behave as they have promised. In particular, we focus on monitoring nonfunctional properties that are specified within an agreed security contract. The novelty of our work is based on the way in which monitoring information can be combined from multiple dynamic services to automate the monitoring of business processes and proactively report compliance violations.
Our framework allows to both specify policy diagrammatically and by using a textual policy language. Moreover, the framework supports the enables monitoring of both atomic and composite services.
Want to learn the details or read our case study? Have a look at our latest paper in the Journal of Software: Evolution and Process [1].
PS: The monitoring framework works nicely together with our tools for End-to-End Secure Service Compositions.