A low-cost security certification scheme for evolving services