Skip to Main content Skip to Navigation
Journal articles

Securing Workflows Using Microservices and Metagraphs

Abstract : Companies such as Netflix increasingly use the cloud to deploy their business processes. Those processes often involve partnerships with other companies, and can be modeled as workflows where the owner of the data at risk interacts with contractors to realize a sequence of tasks on the data to be secured. In this paper, we first show how those workflows can be deployed and enforced while preventing data exposure. Second, this paper provides a global framework to enable the verification of workflow policies. Following the principles of zero-trust, we develop an infrastructure using the isolation provided by a microservice architecture to enforce owner policy. We implement a workflow with our infrastructure in a publicly available proof of concept. This work allows us to verify that the specified policy is correctly enforced by testing the deployment for policy violations, and find the overhead cost of authorization to be reasonable for the benefits. In addition, this paper presents a way to verify policies using a suite of tools transforming and checking policies as metagraphs. It is evident from the results that our verification method is very efficient regarding the size of the policies. Overall, this infrastructure and the mechanisms that verify the policy is correctly enforced, and then correctly implemented, help us deploy workflows in the cloud securely.
Document type :
Journal articles
Complete list of metadata

https://hal-uphf.archives-ouvertes.fr/hal-03709704
Contributor : Kathleen TORCK Connect in order to contact the contributor
Submitted on : Thursday, June 30, 2022 - 10:01:13 AM
Last modification on : Friday, July 8, 2022 - 10:53:48 AM

File

electronics-10-03087-v2.pdf
Publication funded by an institution

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Loïc Miller, Pascal Mérindol, Antoine Gallais, Cristel Pelsser. Securing Workflows Using Microservices and Metagraphs. Electronics, MDPI, 2021, 10 (24), pp.3087. ⟨10.3390/electronics10243087⟩. ⟨hal-03709704⟩

Share

Metrics

Record views

4

Files downloads

5