A Methodology to build run-time Monitors for Security-Aware Workflows