A logical framework for history-based access control and reputation systems

Journal of Computer Security

Volumn 16, Issue 1, 2008, Pages 63-101

  Krukow, Karl ^a   Nielsen, Mogens ^b   Sassone, Vladimiro ^c  

^a Trifork AS   (Denmark)

^b AARHUS UNIVERSITY   (Denmark)

^c UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

Author keywords

Dynamic model checking; Event structures; History based access control; Linear temporal logic; Reputation systems; Trust management

Indexed keywords

CONTROL SYSTEMS; DECISION MAKING; INFORMATION SYSTEMS; MATHEMATICAL MODELS; MODEL CHECKING; PARAMETER ESTIMATION; TEMPORAL LOGIC;

DYNAMIC MODEL CHECKINGS; EVENT STRUCTURES; HISTORY BASED ACCESS CONTROL; LINEAR TEMPORAL LOGICS; REPUTATION SYSTEMS; TRUST MANAGEMENT;

ACCESS CONTROL;

EID: 37249031542     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2008-16102     Document Type: Article

References (41)

1. M. Bartoletti, P. Degano and G.L. Ferrari, History-based access control with local policies, in: Foundations of Software Science and Computational Structures: 8th International Conference, FOSSACS 2005, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2005, Edinburgh, UK, April 4-8, 2005, Proceedings, Springer-Verlag, 2005, pp. 316-332.
2. D.F. Brewer and M.J. Nash, The Chinese Wall security policy, in: Proceedings from the 1989 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, 1989, pp. 206-214.
3. V. Cahill, E. Gray et al., Using trust for secure collaboration in uncertain environments, IEEE Pervasive Computing 2(3) (2003), 52-61.
4. V. Cahill and J.-M. Seigneur, The SECURE website, http://secure.dsg.cs.tcd.ie, 2004.
5. M. Carbone, M. Nielsen and V. Sassone, A calculus for trust management, in: Proceedings from Foundations of Software Technology and Theoretical Computer Science: 24th International Conference (FSTTCS'04), Springer-Verlag, 2004, pp. 161-173.
6. C. Dellarocas, The digitization of word of mouth: Promise and challenges of online feedback mechanisms, Management Science 49(10) (2003), 1407-1424.
7. C. Dellarocas, Sanctioning reputation mechanisms in online trading environments with moral hazard, Working paper. Available online: http://ccs.mit.edu/dell, July 2004.
8. eBay Inc, The eBay website, http://www.ebay.com.
9. G. Edjlali, A. Acharya and V. Chaudhary, History-based access control for mobile code, in: Proceedings from the 5th ACM Conference on Computer and Communications Security (CCS'98), ACM Press, 1998, pp. 38-48.
10. 1. Erlingsson and F.B. Schneider, SASI enforcement of security policies: A retrospective, in: Proceedings from the 2000 DARPA Information Survivability Conference and Exposition, IEEE Computer Society Press, 2000, pp. 1287-1295.
11. P.W.L. Fong, Access control by tracking shallow execution history, in: Proceedings from the 2004 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, 2004, pp. 43-55.
12. C. Fournet and A.D. Gordon, Stack inspection: Theory and variants, ACM Transactions on Programming Languages and Systems 25(3) (2003), 360-399.
13. K. Havelund and G. Roşu, Synthesizing monitors for safety properties, in: Tools and Algorithms for the Construction and Analysis of Systems: 8th International Conference (TACAS'02), Lecture Notes in Computer Science, Vol. 2280, Springer-Verlag, 2002, pp. 342-356.
14. A. Jøsang and R. Ismail, The beta reputation system, in: Proceedings from the 15th Bled Conference on Electronic Commerce, Bled, 2002.
15. A. Jøsang, R. Ismail and C. Boyd, A survey of trust and reputation systems for online service provision, Decision Support Systems 43(2) (2007), 618-644. (Preprint available online: http://sky.fit.qut. edu.au/~josang/).
16. X Kam, X Villa, R.K. Brayton and A.L. Sangiovanni-Vincentelli, Multi-valued decision diagrams: Theory and applications, International Journal on Multiple-Valued Logic 4(1-2) (1998), 9-62.
17. S.D. Kamvar, M.X Schlosser and H. Garcia-Molina, The Eigentrust algorithm for reputation management in p2p networks, in: WWW'03: Proceedings of the 12th international conference on World Wide Web, ACM Press, New York, NY, USA, 2003, pp. 640-651.
18. N. Klarlund, A. Møller and M.I. Schwartzbach, The DSD schema language, Automated Software Engineering 9(3) (2002), 285-319.
19. P. Kollock, The production of trust in online markets, http://www.ssc.net.ucla.edu/soc/faculty/kollock/papers/online_trust.htm.
20. D. Kreps, R. Milgrom, J. Roberts and R. Wilson, Reputation and imperfect information, Journal of Economic Theory 27(2) (1982), 253-279.
21. K. Krukow, Towards a theory of trust for the global ubiquitous computer, PhD thesis, University of Aarhus, Denmark, Aug. 2006. Available online: http://www.brics.dk/~krukow.
22. F. Laroussinie, N. Markey and P. Schnoebelen, Temporal logic with forgettable past, in: Proceedings from the 17th IEEE Symposium on Logic in Computer Science (LICS'02), IEEE Computer Society Press, 2002, pp. 383-392.
23. A. Møller, The dk.brics.automaton project website, http://www.brics.dk/auto.maton/, 2005.
24. A. Møller, The DSD2.0 project website, http://www.brics.dk/DSD/, 2005.
25. L. Mui, M. Mohtashemi and A. Halberstadt, Notions of reputation in multi-agents systems: A review, in: Proceedings from The First International Joint Conference on Autonomous Agents & Multiagent Systems (AAMAS'02), ACM Press, 2002, pp. 280-287.
26. M. Nielsen and K. Krukow, On the formal modelling of trust in reputation-based systems, in: Theory Is Forever: Essays Dedicated to Arto Salomaa on the Occasion of His 70th Birthday, J. Karhumaki, H. Maurer, G. Paun and G. Rozenberg, eds, Lecture Notes in Computer Science, Vol. 3113, Springer-Verlag, 2004, pp. 192-204.
27. J. Park, and R. Sandhu, The uconabc usage control model, ACM Transactions on Information System Security, 7 (2004), 128-174.
28. A. Pnueli, The temporal logic of programs, in: Proceedings from the 18th Annual Symposium on Foundations of Computer Science (FOCS'77), IEEE, New York, 1977, pp. 46-57.
29. R. Pucella and V. Weissman, A logic for reasoning about digital rights, in: Proceedings from 15th IEEE Computer Security Foundations Workshop (CSFW'02), IEEE Computer Society Press, 2002, pp. 282-294.
30. P. Resnick, R. Zeckhauser, E. Friedman and K. Kuwabara, Reputation systems, Communications of the ACM 43(12) (2000), 45-48.
31. M. Roger and J. Goubault-Larrecq, Log auditing through model-checking, in: Proceedings from the 14th IEEE Computer Security Foundations Workshop (CSFW'01), IEEE Computer Society Press, 2001, pp. 220-236.
32. F.B. Schneider, Enforceable security policies, Journal of the ACM 3(1) (2000), 30-50.
33. V. Shmatikov and C. Talcott, Reputation-based trust management, Journal of Computer Security 13(1) (2005), 167-190.
34. A.P. Sistla and E.M. Clarke, The complexity of prepositional linear temporal logics, Journal of the ACM 32(3) (1985), 733-749.
35. C. Skalka and S. Smith, History effects and verification, in: Programming Languages and Systems: Second Asian Symposium, APLAS 2004, Taipei, Taiwan, November 4-6, 2004, Proceedings, Springer-Verlag, 2005, pp. 107-128.
36. L.J. Stockmeyer and A.R. Meyer, Word problems requiring exponential time(preliminary report), in: Proceedings of the fifth annual ACM symposium on Theory of computing (STOC'73), ACM Press, New York, NY, USA, 1973, pp. 1-9.
37. J. Whaley, The javabdd project website, http://javabdd.sourceforge.net/, 2005.
38. R. Wilson, Reputations in games and markets, in: Game-Theoretic Models of Bargaining, A. Roth, ed., Cambridge University Press, 1985, pp. 27-62.
39. G. Winskel, Event structure semantics for CCS and related languages, in: Proceedings from ICALP 1982, Lecture Notes in Computer Science, Vol. 140, Springer-Verlag, 1982, pp. 561-576.
40. G. Winskel and M. Nielsen, Models for concurrency, in: Handbook of Logic in Computer Science, Vol. 4, S. Abramsky, D.M. Gabbay and T.S.E. Maibaum, eds, Oxford University Press, 1995, pp. 1-148.
41. X. Zhang, J. Park, F. Parusu-Presicce and R. Sandhu, A logical specification for usage control, in: Proceedings from the ninth ACM Symposium on Access Control models and Technologies (SACMAT'04), ACM Press, 2004, pp. 1-10.