A static approach is proposed to study secure composition of services. We extend the λ-calculus with primitives for selecting and invoking ser- vices that respect given security requirements. Security-critical code is en- closed in policy framings with a possibly nested, local scope. Policy fram- ings enforce safety and liveness properties. The actual run-time behaviour of services is over-approximated by a type and effect system. Types are standard, and effects include the actions with possible security concerns — as well as information about which services may be invoked at run-time. An approximation is model-checked to verify policy framings within their scopes. This allows for removing any run-time execution monitor, and for determining the plans driving the selection of those services that match the security requirements on demand.
|Autori:||M. BARTOLETTI; P. DEGANO; FERRARI G; R. ZUNINO|
|Titolo:||Planning and verifying service composition|
|Anno del prodotto:||2009|
|Appare nelle tipologie:||1.1 Articolo in rivista|