Towards a dynamic and composite model of trust

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2009, Pages 217-226

  Lee, Adam J ^a   Yu, Ting ^b  

^a University of Pittsburgh   (United States)

^b North Carolina State University   (United States)

Author keywords

Credentials; Policy; Reputation; Trust

Indexed keywords

ARBITRARY COMPOSITIONS; CASE ANALYSIS; COMPOSITE MODELS; CREDENTIAL-BASED; DISTRIBUTED COMPUTING; DISTRIBUTED SYSTEMS; FUNCTIONAL REQUIREMENT; POLICY LANGUAGE; TRUST AND REPUTATION; TRUST MANAGEMENT; TRUST METRICS; TRUST RELATIONSHIP;

LINGUISTICS; QUERY LANGUAGES; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 70450247023     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1542207.1542242     Document Type: Conference Paper

References (37)

1. Amazon.com: Recommended for you. Web Site, Dec. 2008. http://www.amazon.com/gp/yourstore/recs/.
2. S. Axelsson. Intrusion detection systems: A survey and taxonomy. Dept. of Computer Engineering Technical Report 99-15, Chalmers University of Technology, Mar. 2000.
3. L. Bauer, S. Garriss, and M. K. Reiter. Distributed proving in access-control systems. In Proceedings of the 2005 IEEE Symposium on Security and Privacy, pages 81-95, May 2005.
4. M. Y. Becker and P. Sewell. Cassandra: Distributed access control policies with tunable expressiveness. In Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, pages 159-168, June 2004.
5. E. Bertino, E. Ferrari, and A. C. Squicciarini. Trust-X: A peer-to-peer framework for trust establishment. IEEE Transactions on Knowledge and Data Engineering, 16(7):827-842, July 2004.
6. B. K. Bhargava and Y. Zhong. Authorization based on evidence and trust. In International Conference on Data Warehousing and Knowledge Discovery, pages 94-103, Aix-en-Provence, France, Sept. 2002.
7. J. Biskup and Y. Karabulut. A hybrid pki model: Application to secure mediation. In DBSec, pages 271-282, 2002.
8. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized Trust Management. In IEEE Symposium on Security and Privacy, Oakland, CA, May 1996.
9. M. Blaze, J. Feigenbaum, and M. Strauss. Compliance checking in the PolicyMaker trust management system. In Proceedings of the Second International Conference on Financial Cryptography, number 1465 in Lecture Notes in Computer Science, pages 254-274. Springer, Feb. 1998.
10. P. Bonatti, C. Duma, D. Olmedilla, and N. Shahmehri. An integration of reputation-based and policy-based trust management. In Sematic Web and Policy Workshop, Galway, Ireland, Nov. 2005.
11. B. Carminati, E. Ferrari, and A. Perego. Enforcing access control in web-based social networks. ACM Transactions in Information and System Security. to appear.
12. B. Carminati, E. Ferrari, and A. Perego. Combining social networks and semantic web technologies for personalizing web access. In Proceedings of the 4th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom), Nov. 2008.
13. B. Carminati, E. Ferrari, and A. Perego. A decentralized security framework for web-based social networks. International Journal of Information Security and Privacy, 2(4):22-53, 2008.
14. F. Cornelli, E. Damiani, S. D. C. di Vimercati, S. Paraboschi, and P. Samarati. Choosing reputable servents in a p2p network. In Proceedings of the 11th international conference on World Wide Web, pages 376-386, 2002.
15. E. Damiani, D. C. di Vimercati, S. Paraboschi, P. Samarati, and F. Violante. A reputation-based approach for choosing reliable resources in peer-to-peer networks. In Proceedings of the 9th ACM conference on Computer and communications security, pages 207-216, 2002.
16. K. Frikken, M. Atallah, and J. Li. Attribute-based access control with hidden policies and hidden credentials. IEEE Transactions on Computers, 55(10):1259-1270, 2006.
17. M. Grimsley, A. Meehan, G. Green, and B. Stafford. Social capital, community trust, and e-government services. In International Conference on Trust Management, Pisa, Italy, May 2003.
18. K. Hoffman, D. Zage, and C. Nita-Rotaru. A survey of attack and defense techniques for reputation systems. ACM Computing Surveys, to appear.
19. T. Jim. SD3: A trust management system with certified evaluation. In Proceedings of the IEEE Symposium on Security and Privacy, pages 106-115, May 2001.
20. A. Josang, R. Ismail, and C. Boyd. A survey of trust and reputation systems for online service provision. Decis. Support Syst., 43(2):618-644, 2007.
21. S. Kamvar, M. Schlosser, and H. Garcia-Molina. EigenRep: Reputation Management in P2P Networks. In Twelfth International World Wide Web Conference, 2003.
22. S. Kruk, S. Grzonkowski, A. Gzella, T. Woroniecki, and H.-C. Choi. D-foaf: Distributed identity management with access rights delegation. In Asian Semantic Web Conference, Beijing, China, Sept. 2006.
23. A. J. Lee and M. Winslett. Towards an efficient and language-agnostic compliance checker for trust negotiation systems. In Proceedings of the 3rd ACM Symposium on Information, Computer and Communications Security (ASIACCS 2008), pages 228-239, Mar. 2008.
24. N. Li and J. C. Mitchell. RT: A role-based trust-management framework. In Proceedings of the Third DARPA Information Survivability Conference and Exposition (DISCEX III), pages 201-212, Apr. 2003.
25. N. Li, J. C. Mitchell, and W. H. Winsborough. Beyond proof-of-compliance: security analysis in trust management. Journal of the ACM, 52(3):474-514, 2005.
26. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, 2003.
27. Liberty alliance project. Web Site, Dec. 2008. http://www.projectliberty. org/.
28. A. Mounji, B. L. Charlier, D. Zampunieris, and N. Habra. Distributed audit trail analysis. In Proceedings of the 1995 Symposium on Network and Distributed System Security (SNDSS'95), 1995.
29. NetFlix prize: Home. Web Site, Dec. 2008. http://www.netflixprize.com/.
30. R. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, Feb. 1996.
31. K. E. Seamons, M. Winslett, T. Yu, B. Smith, E. Child, J. Jacobson, H. Mills, and L. Yu. Requirements for policy languages for trust negotiation. In IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY), June 2002.
32. Shibboleth Project. http://shibboleth.internet2.edu/.
33. TrustBuilder2 download page. Web site, Oct. 2008. http://dais.cs.uiuc. edu/dais/security/tb2/.
34. L. Wang, D. Wijesekera, and S. Jajodia. A logic-based framework for attribute based access control. In Proceedings of the Second ACM Workshop on Formal Methods in Security Engineering (FMSE 2004), pages 45-55, Oct. 2004.
35. D. Wijesekera and S. Jajodia. A propositional policy algebra for access control. ACM Transactions on Information and Systems Security (TISSEC), 6(2):286-325, May 2003.
36. W. H. Winsborough, K. E. Seamons, and V. E. Jones. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, Jan. 2000.
37. L. Xiong and L. Liu. A reputation based trust model for peer-to-peer ecommerce communities. In IEEE International Conference on E-Commerce (CEC), 2003.