Profile-based security assurances for service software

Abstract

In service software, it is highly desirable to have a service composition mechanism that supports automatic reasoning about the security assurances of services. Service consumers such as human, machine, even application software may have their specific security requirements for services they consume. The requirements vary from consumers to consumers. This paper outlines a framework focusing on the selection of service software consistent with the security requirements of various consumers, and compatibility checking of the assurances provided by services. We use profile-based compatibility analysis techniques to form an essential building block towards assuring security of service software.