Critical systems are progressively abandoning the traditional isolated and closed architectures, and adopting more federated solutions, in order to deal with orchestrated decision making within large-scale infrastructures. Such an increasing connectivity and the possibility of dynamically integrate constituents in a seamless manner by means of a decoupling middleware solution are causing the flouring of novel and previously unseen security threats, such as internal attacks conducted by camouflaged and/or compromised federated systems. Trust management is the most efficient way for dealing with such attacks, so that each constituent computes a trust degree of the other interacting ones based on the direct experiences and of collected reputation scores. An adversary may negatively affect the overall process with false reputations, which must not be considered when estimating a trust degree. Our work combines a multi-criteria linguistic fuzzy term formulation of the trust degree with the concept of entropy for measuring the divergence of certain scores from the other ones and to avoid to consider them during reputation aggregation. A set of experiments have been conducted in order to measure the quality and effectiveness of the presented approach.
KEYWORDSDempster-Shafer theory, entropy, fuzzy sets, information theory, trust management
INTRODUCTIONThe current most challenging ICT contexts is composed by the so-called System of Systems (SoS), 1 which consists in the realization of large-scale infrastructures as the federation of several systems, most of which already exist and need to be properly adapted so as to be interconnected. In such a vision, the federated systems are intended to team up in order to perform complex tasks from the composition of the operations and resources offered by the single systems. This is need in order to offer more functionalities, higher quality and efficiency than simply what is achievable by summing up what offered by the constituent systems. Despite the lacking of a standard definition of SoS and the availability in the current literature of around 40 different definitions, 2 several instances of SoS are available in the industrial practice, starting from the defense sector, where therehas been the first application of SoS, until other civil applications such as health information systems, critical infrastructure management, or the design of the Internet and cloud platforms (just to cite some of the main ones). All of those instances share a common architecture made of a federation middleware, typically complaint to the publish/subscribe service 3 for scalability and decoupling reasons, that seamlessly, autonomously, and dynamically let heterogeneous systems to be joined and integrated according to a plug-and-play approach without a centralized management.Many of the critical infrastructures under development embrace the vision of the SoS in order to have a better orchestration of the control decisions among their constituents, rather than having a set of independent systems with no...