Ensuring the preservation of security is a key requirement and challenge for Service-Based Systems (SBS) due to the use of third party software services not operating under different security perimeters. In this paper, we present an approach for verifying the security properties of SBS workflows and adapting them if such properties are not preserved. Our approach uses secure service composition patterns. These patterns encode proven dependencies between service level and workflow level security properties. These dependencies are used in reasoning processes supporting the verification of SBS workflows with respect to workflow security properties and their adaptation in ways that guarantee the properties if necessary. Our approach has been implemented by extending the Eclipse BPEL Designer and validated experimentally. The experimental evaluation has produced positive results, indicating that even for complex workflows and large sets of secure service composition patterns, verification can be performed efficiently.

中文翻译：

---

基于模式的安全服务组合设计与验证

由于使用不在不同安全范围内运行的第三方软件服务，确保安全保护是基于服务的系统 (SBS) 的关键要求和挑战。在本文中，我们提出了一种方法来验证 SBS 工作流的安全属性，并在不保留这些属性的情况下对其进行调整。我们的方法使用安全的服务组合模式。这些模式对服务级别和工作流级别安全属性之间经过验证的依赖关系进行编码。这些相关性用于支持验证 SBS 工作流关于工作流安全属性的推理过程，并在必要时以保证属性的方式进行调整。我们的方法是通过扩展 Eclipse BPEL Designer 实现的，并经过实验验证。