Secure and Polymorphic Composition of Service Workflows

Modern applications are increasingly built as compositions of services deployed across diverse platforms. Ensuring the security and privacy of these service compositions remains a significant challenge, particularly within the dynamic and distributed environment of the Cloud Continuum. In such contexts, choreography, which avoids reliance on a centralized orchestrator, is often more suitable than traditional orchestration approaches. In this paper, we introduce a polymorphic workflow composition methodology that supports the design of choreographed workflows capable of adapting their structure (i.e., the polymorphism) and behavior based on specific security requirements and deployment contexts. Our approach generates deployment recipes that preserve critical non-functional properties, such as security and privacy. We evaluate our methodology in both traditional Cloud Continuum environments and high-performance computing (HPC) clusters, demonstrating its ability to maintain deployment independence from the underlying infrastructure.