Defining IoT Orchestrations with Security and Privacy by Design: A Gap Analysis

Structured approaches to the definition of service orchestrations facilitate the composition of components and services and allow for more capable and powerful applications, while introducing many advantages such as service reusability, cost reduction, and simplification of organization alliances. A variety of such approaches exist in the literature, with more recent approcahes focusing on the IoT. Nevertheless, oftentimes security and privacy aspects are not adequately considered, which constitutes a significant barrier to the deployment of IoT applications and services with security and privacy built-in by design. The objective of this work is to provide an overview of service composition approaches, highlighting how the scientific community approaches the IoT service composition problem, while identifying the limitations of the current solutions in terms of catering to the security and privacy challenges. Furthermore, a novel approach for composing IoT systems with proven security and privacy properties is proposed.