TrustBuilder2: A Reconfigurable Framework for Trust Negotiation

Lee, Adam J.; Winslett, Marianne; Perano, Kenneth J.

doi:10.1007/978-3-642-02056-8_12

Cited by 30 publications

(19 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The well-known TrustBuilder ( [141], [142]) follows these principles supporting several negotiation strategies with the priori that the Internet is a place where autonomy is important and strangers will often differ in their choices. This approach relies on credentials and access control policies that govern access to protected resources/services.…”

Section: E Policy and Trust Negotiationmentioning

confidence: 99%

A Survey of Trust in Workflows and Relevant Contexts

Viriyasitavat

Martin

2011

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

With the fast-growing Internet technology, several service-based interactions are prevalent and appear in several forms such as e-commerce, content provider, Virtual Organizations, Peer-to-Peer, Web Service, Grids, Cloud Computing, and individual interactions. This demands for an effective mechanism to establish trust among participants in a highlevel abstract way, capturing relevant factors ranging on Service Level Agreement, security policies, requirements, regulations, constraints, Quality of Service, reputation, and recommendation. Trust is platform-independent and flexible to be seamlessly integrated into heterogeneous domains and interoperate with different security solutions in distributed environments. Establishing trust in a service workflow leads to the willingness of services to participate. Coordinating service workflows without trust consideration may pose higher risks, possibly results in poor performance, additional vulnerabilities, or failures. Although trust in service workflows and relevant contexts has been studied for a past decade, the standard development is still immature. Nowadays, trust approaches to service workflows comprise a large area of research where one can hardly classify into a comprehensive survey. This survey examines and explores the role of trust in service workflows and their contexts from a wide variety of literatures. Various mechanisms, architecture, techniques, standards, and frameworks are explained along the way with discussions. Working trust definition and classification are newly provided and supported with examples.

show abstract

Section: E Policy and Trust Negotiationmentioning

confidence: 99%

A Survey of Trust in Workflows and Relevant Contexts

Viriyasitavat

Martin

2011

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

show abstract

“…A more generic work is presented by TrustBuilder2 [18]. In this work the authors presented a generic and extensible framework for authentication and security policy exchanges.…”

Section: Related Workmentioning

confidence: 99%

Behavior evaluation for trust management based on formal distributed network monitoring

2015

View full text Add to dashboard Cite

Collaborative systems are growing in use and in popularity. The need to boost the methods concerning the interoperability is growing as well; therefore, trustworthy interactions of the different systems are a priority. The systems need to interact with users and other applications. The decision regarding with whom and how to interact with other users or applications depends on each application or system. In this paper, we focus on providing trust verdicts by evaluating the behaviors of different agents, making use of distributed network monitoring. This will provide trust management systems based on "soft trust" information regarding a trustee experience. We propose a formal distributed network monitoring approach to analyze the packets exchanged by the entities, in order to prove a system is acting in a trustworthy manner. Based on formal "trust properties", we analyze the systems' behaviors, then, we provide trust verdicts regarding those "trust properties". Furthermore, automatized testing is performed using a suite of tools we have developed, and finally, our methodology is applied to a real industrial DNS use case scenario.

show abstract

“…GovernmentAuthorization(Country = "U K")) or M ilitary(Country = "U K") (3) The coordinator of the IAN has the appropriate government authorization and it has an ID released from the United Kingdom. The ID can be freely disclosed, therefore it has no disclosure policy associated.…”

Section: B Cognitive Radio Authenticationmentioning

confidence: 99%

“…The TE runtime system includes a compliance checker that TrustBuilder uses to verify whether a set of certificates satisfies an access control policy and to determine which credentials satisfy a policy. The TrustBuilder prototype has been extended into TrustBuilder2 [3]. TrustBuilder2 leverages a plug-in based architecture, extensible data type hierarchy, and flexible communication protocol to provide a framework within which numerous trust negotiation protocols and system configurations can be quantitatively analyzed.…”

Section: B Trust Negotiationmentioning

confidence: 99%

Adaptive and Distributed Access Control in Cognitive Radio Networks

Baldini

Braghin

Fovino

et al. 2010

2010 24th IEEE International Conference on Advanced Information Networking and Applications

View full text Add to dashboard Cite

Cognitive Radio (CR) is a novel wireless technology communication that allows for adaptive configuration of the reception parameters of a terminal, based on the information collected from the environment. CR techniques may be applied to the resolution of emergency crisis to improve the spectrum utilization and the resilience of the wireless networks used by public safety organizations. Typically, such scenarios demand a mechanism for expressing and enforcing access control policies: that is, for stating what are the available resources (e.g. transmission/reception bandwidths), what are the parties that are allowed to access them and under what conditions. However, due to the intrinsically highly dynamic nature of such settings -in which unknown parties may suddenly appear and force a change in the configuration of other parties -it is extremely difficult to establish in advance what are the most suitable access control policies. Trust negotiation is a well-known approach for expressing and enforcing distributed access control policies which depend on two or more (initially mutually untrusting) parties. Such policies are determined on the fly by all the involved parties and do not require a centralized authority. In this work we present a trust negotiation-based framework which allows for the definition of highly expressive and flexible distributed access control policies and their efficient enforcement in cognitive radio networks.

show abstract

TrustBuilder2: A Reconfigurable Framework for Trust Negotiation

Cited by 30 publications

References 23 publications

A Survey of Trust in Workflows and Relevant Contexts

A Survey of Trust in Workflows and Relevant Contexts

Behavior evaluation for trust management based on formal distributed network monitoring

Adaptive and Distributed Access Control in Cognitive Radio Networks

Contact Info

Product

Resources

About