Trust Management in P2P Systems Using Standard TuLiP

Abstract

In this paper we introduce Standard TuLiP -a new logic based Trust Management system. In Standard TuLiP, security decisions are based on security credentials, which can be issued by different entities and stored at different locations. Standard TuLiP directly supports the distributed credential storage by providing a sound and complete Lookup and Inference AlgoRithm (LIAR). In this paper we focus on (a) the language of Standard TuLiP and (b) on the practical considerations which arise when deploying the system. These include credential encoding, system architecture, system components and their functionality, and also the usability issues.

A Semantic Security Framework for Systems of Systems

“…45 Contrarily to many of the existing algorithms (e.g., see Ref. 13,29), GEM retrieves the credentials necessary to construct a chain of trust in a completely distributed way without disclosing the security policies of parties, thereby preserving their confidentiality. • Ontology-based services to enable autonomy and interoperability among the parties in an SoS.…”

“…Contrarily to other algorithms (e.g., see Ref. 13,29), GEM, the policy evaluation algorithm used within our framework, derives the credentials required by the operators of IT-1 and CG-1 to access the requested information without disclosing the security policies of the parties in the SoS. Finally, the alignment of the vocabularies of the Dutch navy and the Dutch coastguard is performed in a completely automated way, allowing the Dutch navy to compute the similarity between concepts "SAR vessel" and "SAR lifeboat" on the fly, without requiring knowledge of the ontologies where the two concepts are defined.…”

LP with Flexible Grouping and Aggregates Using Modes

“…Because we want to use grouping in our trust management system TuLiP [10,9], we want to be able to use grouping not only in queries but also as subgoals in programs. In this section we discuss the use of moded_bagof in programs.…”

“…Grouping and aggregation are useful in practice, and paramount in database systems. In fact, the reason why we address the problem here is of a practical nature: we are developing a language for trust management [5,7,18] called TuLiP [8,9,10]. TuLiP is based on (partially function-free) moded logic programming, in which a logic program is augmented with an indication of which are the input and the output positions of each predicate.…”

A Security Policy Infrastructure for Tactical Service Oriented Architectures

“…A parallel evaluation between the identified functional policy requirements and the constraints imposed by the nature of tactical SOA, was undertaken for the examination of suitable security policy frameworks. This examination included commonly used mechanisms, such as WS -Security, SAML [5], XACML [6] and Ponder [7], as well as recent semantic (REI [8], KAOS [9], ROWLBAC [10], Kolter et al [11], Trivellato et al [12]) and trust management frameworks (cassandra [13], Tulip [14], RT [15], Peer-Trust [16]). This analysis promoted the use of web ontology language (OWL) as the most suitable solution in respect to the requirements of tactical SOA.…”