An End-to-End Dynamic Trust Framework for Service-Oriented Architecture

Azarmi, Mehdi; Bhargava, Bharat

doi:10.1109/cloud.2017.78

Cited by 4 publications

(16 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The approach of Azarmi [65] is that a microservice's trust value should inherit from all the other services that have direct or indirect interaction with it. To this end, two trust algorithms were introduced: Coarse-Grained Global Algorithm and Graph-Reduction Global Algorithm.…”

Section: ) Composition-basedmentioning

confidence: 99%

“…Skandylas et al [18] mentioned that the initial trust of the newcomer could be decided based on its context, but did not give any details on how to initiate trust with contexts. Azarmi [65] mentioned that a newcomer microservice should be assigned a value that is between 0 and 1 as its initial trust but did not introduce how to assign a value.…”

Section: A Trust Bootstrappingmentioning

confidence: 99%

“…In some socio-based and composition-based trust models, a truster service i uses trust-related knowledge from other microservices to infer its trust towards a microservice j, with which it has not previously interacted. This is described as a "trust chain" [18], [55], [65]. However, if any microservices in the chain are missing (for example, as a result of operational failures or the actions of the developers), then it becomes a question of whether the inferred trust i has to j is reliable or not.…”

Section: B Effect Of Missing Microservicesmentioning

confidence: 99%

“…This can be done either individually or via coordinated groups, which may collude to recommend a malicious microservice in order to artificially build its reputation and cause other microservices to trust it. Service-composition-graph-based models (e.g., [65]) also face this issue. As it is a graph-based trust model and the trust of the truster relies on its trustees, the truster microservice can give all its trustees high ratings to improve its own trust score.…”

Section: Trust Manipulationmentioning

confidence: 99%

“…Although the decomposition algorithm is weighted, there is still a chance for a microservice to be assigned a trust score that is higher than its actual trustworthiness because other microservices within the solution are very trustworthy, and vice versa. In [65], because of the graph-based algorithm, the trust scores of a microservice i's previous trustees play an important role in the computation of its own trust. Therefore, there is a chance that i itself is not trustworthy, but because its trustees have high trust scores, i can still have an high artificial trust score.…”

Section: Compensated Trustmentioning

confidence: 99%

See 4 more Smart Citations

A Survey on Microservices Trust Models for Open Systems

Delaney

Lillis

2023

IEEE Access

View full text Add to dashboard Cite

The microservices architecture (MSA) is a form of distributed systems architecture that has been widely adopted in large-scale software systems in recent years. As with other distributed system architectures, one of the challenges that MSA faces is establishing trust between the microservices, particularly in the context of open systems. The boundaries of open systems are unlimited and unknown, which means they can be applied to any use case. Microservices can leave or join an open system arbitrarily, without restriction as to ownership or origin, and scale extensively. The organisation of microservices (in terms of the roles they play and the communication links they utilise) can also change in response to changes in the environment that the system is situated in. The management of trust within MSAs is of great importance as the concept of trust is critical to microservices communication, and the operation of an open MSA system is highly reliant on communication between these fine-grained microservices. Thus, a trust model should also be able to manage trust in an open environment. Current trust management solutions, however, are often domain-specific and many are not specifically tailored towards the open system model. This motivates research on trust management in the context of open MSA systems. In this paper, we examine existing microservices trust models, identify the limitations of these models in the context of the principles of open microservices systems, propose a set of qualities for open microservices trust models that emerge from these limitations, and assess selected microservices trust models using the proposed qualities. INDEX TERMS microservices, trust management, service oriented architecture, open systems I. INTRODUCTION

show abstract

Section: ) Composition-basedmentioning

confidence: 99%

Section: A Trust Bootstrappingmentioning

confidence: 99%