The SPaCIoS Project: Secure Provision and Consumption in the Internet of Services

Abstract

We describe the SPaCIoS project, illustrating its main objectives, the results obtained so far and those that we expect to achieve, in particular, the development of the SPaCIoS Tool, an integrated platform that takes as input a formal description of the system under validation, the expected security goals, and a description of the capabilities of the attacker, and automatically generates and executes a sequence of test cases on the system through a number of proxies.The vision of the Internet of Services (IoS) entails a major paradigm shift in the way ICT systems and applications are designed, implemented, deployed and consumed: they are no longer the result of programming components in the traditional meaning but are built by composing services that are distributed over the network and aggregated and consumed at run-time in a demand-driven, flexible way. In the IoS, services are business functionalities that are designed and implemented by producers, deployed by providers, aggregated by intermediaries and used by consumers. However, the new opportunities opened by the IoS will only materialize if concepts, techniques and tools are provided to ensure security.State-of-the-art security validation technologies, when used in isolation, do not provide automated support to the discovery of important vulnerabilities and associated exploits that are already plaguing complex web-based securitysensitive applications, and thus severely affect the development of the IoS. Moreover, security validation should be applied not only at production time but also when services are deployed and consumed.Tackling these challenges is the main objective of the SPaCIoS project, an unprecedented effort from academia and industry that has been laying the technological foundations for a new generation of analyzers for automated security validation at service provision and consumption time, thereby significantly improving the security of the IoS. This is being achieved by developing and combining state-of-the-art technologies for penetration testing, security testing, automatic learning, model checking and related automated reasoning techniques. We have thus been developing both techniques for property-driven security testing, a variant of testing The work presented in this paper was supported by the

Security Threat Identification and Testing

“…Note that the concretisation and the execution of the test cases have been implemented by re-using components of the testing execution engine extracted from the SPaCIoS project [10]. Fig.…”

“…In doing so, STIATE borrows software components developed for the SPaCIoS Tool [10], [11] that are further improved with new usability features (e.g., the STIATE front-end), richer content for the mutation engine, and reduced manual effort for testing execution. We demonstrate STIATE against an application scenario employing the SAML Single Sign-On multi-party protocol, a well-known industrial security standard largely studied in previous literature.…”

SATMC: A SAT-Based Model Checker for Security-Critical Systems

“…We reported the problem to OASIS which subsequently released an errata addressing the issue. 4 We also used SATMC at SAP as a back-end for security protocol analysis and testing (AVANTSSAR [1] and SPaCIoS [28]) to assist development teams in the design and development of the SAP NetWeaver SAML Single Sign-On (SAP NGSSO) and SAP OAuth 2.0 solutions. Overall, more than one hundred different protocol configurations and corresponding formal models have been analyzed, showing that both SAP NGSSO and SAP OAuth2 services are indeed well designed.…”

“…SATMC has been successfully applied in variety of application domains (namely, security protocols, security-sensitive business processes, and cryptographic APIs) and for different purposes (e.g., design-time security analysis and security testing). SATMC is integrated and used as a backend in a number of research prototypes (the AVISPA Tool [2], Tookan [18], the AVANTSSAR Platform [1], and the SPaCIoS Tool [28]) and industrial-strength tools (the Security Validator plugin for SAP NetWeaver BPM 1 ). The effectiveness of SATMC is witnessed by the key role it played in the discovery of:…”

An interpolation-based method for the verification of security protocols

“…While verification is, of course, the optimal result, falsification is also extremely useful as one can often employ the discovered attack trace to directly carry out an attack on the protocol implementation (e.g., [10]) or exploit the trace to devise a suite of test cases so as to be able to analyze the implementation at run-time (e.g., [11][12][13]). …”