Cloud-Based Utility Service Framework for Trust Negotiations Using Federated Identity Management

Abstract

Utility based cloud services can efficiently provide various supportive services to different service providers. Trust negotiations with federated identity management are vital for preserving privacy in open systems such as distributed collaborative systems. However, due to the large amounts of server based communications involved in trust negotiations scalability issues prove to be less cumbersome when offloaded on to the cloud as a utility service. In this view, we propose trust based federated identity management as a cloud based utility service. The main component of this model is the trust establishment between the cloud service provider and the identity providers. We propose novel trust metrics based on the potential vulnerability to be attacked, the available security enforcements and a novel cost metric based on policy dependencies to rank the cooperativeness of identity providers. Practical use of these trust metrics is demonstrated by analyses using simulated data sets, attack history data: published by MIT Lincoln laboratory, real-life attacks and vulnerabilities extracted from Common Vulnerabilities and Exposures (CVE) repository and fuzzy rule based evaluations. The results of the evaluations imply the significance of the proposed trust model to support cloud based utility services to ensure reliable trust negotiations using federated identity management.

MADPTM: Mix zones and dynamic pseudonym trust management system for location privacy

“…9,10 (3) Various attacks, if malicious vehicles link ability to normal vehicle, cheat the message receiver by altering the trust management of the event message; a vehicle will be misled due to too many malicious vehicles forwarding the event message to maintain bogus messages and against the normal messages. [11][12][13] (4) Pseudonym expiry is also another problem of the current trust management systems. 15,16,18,19,21,43 If RS make a decision immediately, they might lose important messages that would have helped them to make a better decision; moreover, if RS delay decision making, they might receive some incorrect event messages.…”

“…The same trick used to support bogus event message can still work . (3) Various attacks, if malicious vehicles link ability to normal vehicle, cheat the message receiver by altering the trust management of the event message; a vehicle will be misled due to too many malicious vehicles forwarding the event message to maintain bogus messages and against the normal messages . (4) Pseudonym expiry is also another problem of the current trust management systems .…”

FCMDT: A novel fuzzy cognitive maps dynamic trust model for cloud federated identity management

“…In the literature, there is no specific assessment criterion that can be used in the comparison. Thus, the comparison is made based on the selected criteria from studies in [7], [53]- [56]. These studies have proposed certain criteria that a cloud trust management system should possess.…”

Security and Privacy in Cloud Computing: Vision, Trends, and Challenges

“…tion metrics are proposed to estimate the reliability of security, and to be offered as a cloud utility service. 16 The significance of trust evaluation is vital to ensure secure collaborative data sharing, data analytics, and data outsourcing.…”