Security Enforcement on Web Services Compositions

Web services (WS) composition is the center of many different types of information systems such as ecommerce, financial and healthcare systems, where sensitive data are shared, which raises important security problems. WSBPEL is a standard to specify business processes, however, this orchestration language does not support users to meet their security requirements. This paper proposes a formal and automatic approach for enforcing security policies in WS composition. More precisely, given a composition of WSs written in WS-BPEL and a security policy specified in the LTL logic, this paper aims to generate a new version of the services that respects the security policy. The LTL policy is transformed to a new service that can monitor some activities of the others.