Exploiting Workflow Languages and Semantics for Validation of Security Policies in IoT Composite Services

摘要: Internet of Things (IoT) ecosystems are recently experiencing a significant growth in complexity. Most IoT applications domains like healthcare, industry, automotive, and smart energy composed several interconnected subsystems that produce, collect, process, exchange huge amount data, offer composite services to the end users based on these data. This scenario is exacerbated by dynamism device layer, which may be subject structural or technological changes over time, cope for example with need new sensing/actuation capabilities requirements technical issues. Due inherent sensitive nature data typically processed applications, security represents one primary issues address. It worth noting each subsystem integrated within application have different enforce local policies, policies result globally enforced at system level not comply existing global requirements. In general, analysis validation properties very complex task, made even more introduction laws regulations during life. To above issues, this article, we propose methodology leverages both workflow languages semantics order enable features offered system, goal verifying whether they match end-user national international rules.