A User-Centric Approach to Assessing Confidentiality and Integrity of Service-Based Workflows

In service-based systems (SBS), workflows are composed of loosely coupled services. The quality of service (QoS) of composite service-based workflows needs to be considered. In doing so, various aspects of the QoS of these workflows need to be assessed. In this paper, a user-centric approach is presented to assessing the confidentiality and integrity of service-based workflows, given the QoS of constituent services. Our approach incorporates the users' preferences for data sensitivity on the data processed by the workflow. It allows users to compare the amount of risk incurred by possible failure of the confidentiality or integrity functions of component services of a workflow.