Incorporating social trust into design practices for secure systems

Software Engineering for Secure Systems: Industrial and Research Perspectives

Volumn , Issue , 2010, Pages 260-284

  Cofta, Piotr ^a   Lacohée, Hazel ^a   Hodgson, Paul ^a  

^a BRITISH TELECOM   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84865006235     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-61520-837-1.ch010     Document Type: Chapter

References (59)

1. Abdul-Rahman, A. (2005) A Framework for Decentralised trust Reasoning. PhD Thesis. Available at: http://www.cs.ucl.ac.uk/staff/F.AbdulRahman/docs/thesis-final.pdf.
2. Alcalde, B., & Mauw, S. (2009) An algebra for trust dilution and trust fusion. Accepted for the 2009 World Congress on Privacy, Security, Trust and the Management of e-Business.
3. Anderson, R. (2001). Security Engineering: A Guide to Building Dependable Distributed Systems. New York: John Wiley & Sons Inc.
4. Ashraf, N., Camerer, C. F., & Loewenstein, G. (2005). Adam Smith, Behavioral Economist. The Journal of Economic Perspectives, 19(3). doi:10.1257/089533005774357897
5. Birks, P. (1997). The Classification of Obligations. Clarendon Press.
6. Boehm, B. (1981). Software Engineering Economics. Upper Saddle River, NJ: Prentice-Hall.
7. Castelfranchi, C., & Falcone, R. (2000) Trust is much more than subjective probability: Mental components and sources of trust. Proc. of the 33rd Hawaii. Int. Conf. on System Sciences (HICSS2000). Vol. 6, 2000.
8. Chang, E., Dillion, T., & Hussain, F. K. (2006). Trust and Reputation for Service-Oriented Environments: Technologies for Building Business Intelligence and Consumer Confidence. New York: John Wiley & Sons, Ltd. doi:10.1002/9780470028261
9. Cofta, P. (2006) Distrust. In: Proc. of Eight Int. Conf. on Electronic Commerce ICEC'06, Fredericton, Canada. pp. 250-258.
10. Cofta, P. (2007). Trust, Complexity and Control: Confidence in a Convergent World. New York: John Wiley and Sons.
11. Cofta, P. (2009). Towards a better citizen identification system. Identity in the Information Society, 1(1), 39-53. doi:10.1007/s12394-009-0006-6
12. Cofta, P. (2009). Designing for Trust. In Whitworth, B., & de Moor, A. (Eds.), Handbook of Research on Socio-Technical Design and Social Networking Systems. Information Science Reference. IGI Global.
13. Cofta, P., & Lacohée, H. (2010). Trust in identification systems: from empirical observations to design guidelines. In Yan, Z. (Ed.), Trust Modelling and management in Digital Environments: From Social Concepts to System Development. New York: Information Science Reference. doi:10.4018/978-1-61520-682-7.ch019
14. Collins, T. (2007) NHS security dilemma as smartcards shared. ComputerWeekly, January 30, 2007.
15. Cranor, L., & Garfinkel, S. (2005) Security and Usability: Designing Secure Systems that People Can Use. O'Reilly Media, Inc.
16. Dennett, D. C. (1989). The Intentional Stance. New York: Bradford Books.
17. Dimmock, N., Bacon, J., Ingram, D., & Moody, K. (2005). Risk Models for Trust-Based Access Control (TBAC). In Herrmann, P. (Ed.), iTrust2005, LNCS 3477 (pp. 364-371).
18. Dwyer, N. (2009) Enabling Trust in Virtual Teams. BT STRF Research Report.
19. Flowerday, S., & von Solms, R. (2006). Trust: An Element of Information Security. In FischerHubner, S., Rannenberg, K., Yngstrom, L., & Lindskog, S. (Eds.), IFIP Int. Federation for Information Processing, Security and Privacy in Dynamic Environments. Boston: Springer.
20. Fukuyama, F. (1996). Trust: The Social Virtues and the Creation of Prosperity. Touchstone Books.
21. Gibson, J. J. (1986). The Ecological Approach to Visual Perception. Houghton Mifflin Company USA.
22. Giunchiglia, F., Mylopoulos, J., & Perini, A. (2001) The Tropos Software Development Methodology: Processes, Models and Diagrams. Technical Report DIT-02-008, Informatica e Telecomunicazioni, University of Trento
23. Golbeck, J. (2008). Computing with Social Trust. New York: Springer.
24. Hansen, M. T. (2009). When Internal Collaboration is Bad for Your Company. Harvard Business Review, (April):83-88.
25. Hardin, R. (Ed.). (2002). Trust and trustworthiness. Russel Sage Foundation.
26. Hardin, R. (Ed.). (2004). Distrust. Russell Sage Foundation.
27. Hodgson, P., & Cofta, P. (2008) Society as an information network. International journal of technology, knowledge and society, Boston.
28. Hodgson, P., & Cofta, P. (2009) Towards a methodology for research on trust. In: Proceedings of the WebSci'09: Society On-Line, 18-20 March 2009, Athens, Greece. (In Press)
29. Isham, J. (2000). The Effect of Social Capital on Technology Adoption: Evidence from Rural Tanzania. Opportunities in Africa: Microevidence on Firms and Households. Retrieved 18 October, 2007, from http://www.csae.ox.ac.uk/conferences/2000-OiA/pdfpapers/isham.PDF
30. Kearney, P. (2009) Preliminary specification and design of graphical workbench. Deliverable M3.2.1 EU MASTER project.
31. Keser, C. (2003). Experimental games for the design of reputation management systems. IBM Systems Journal, 42(3). doi:10.1147/sj.423.0498
32. Lacohée, H., Cofta, P., Phippen, A., & Furnell, S. (2008). Understanding Public Perceptions: Trust and Engagement in ICT Mediated Services. International Engineering Consortium.
33. Lassar, W., Mittal, B., & Sharma, A. (1995). Measuring customer-based brand equity. Journal of Consumer Marketing, 12(4), 11-19. doi:10.1108/07363769510095270
34. Lewicki, R. J., Bunker, B. B. (1996) Developing and maintaining trust in work relationships. In Trust in Organisations: Frontiers of theory and Research
35. Lippert, S. K., Davis, M. (2006). A conceptual model integrating trust into planned change activities to enhance technology adoption. Journal of Information Science, 32.
36. Luhmann, N. (1979). Trust and Power. New York: John Wiley & Sons.
37. Marsh, S., & Briggs, P. (2008). Examining Trust, Forgiveness and Regret as Computational Concepts. In Golbeck, J. (Ed.)Computing with Social Trust. New York: Springer.
38. Marsh, S. P. (1994) Formalising Trust as a Computational Concept. University of Stirling PhD thesis.
39. Martin, M. (1991). "Hello, Central?" Gender, technology and Culture in the Formation of Telephone Systems. Montreal: McGill-Queen's University Press.
40. Mauw, S., & Oostdijk, M. (2005). Foundations of Attack Trees. Information Security and Cryptology - ICISC 2005. Springer Lecture Notes in Computer Science, 3935, 186-198. doi:10.1007/11734727_17
41. McAllister, D. J., Lewicki, R. J., & Chaturvedi, S. (2006). Trust in developing relationships: From theory to measurement. In Weaver, K. M. (Ed.), Academy of Management Best Papers Proceedings.
42. McKnight, D. H., & Chervany, N. L. (1996) The Meanings of Trust. In University of Minnesota, http://www.misrc.umn.edu/wpaper/wp96-04.htm.
43. Microsoft. (2009) The Microsoft SDL Threat Modelling Tool. Available: http://msdn.microsoft.com/en-us/security/dd206731.aspx
44. Mollering, G. (2005) The Trust/Control Duality: An Integrative Perspective on Positive Expectations of Others. In: Int. Sociology, September 2005, Vol. 20(3): 283-305. 2005.
45. Mouratidis, H., & Cofta, P. (2010). Practitioner's challenges in designing trust into online systems. Manuscript.
46. Mouratidis, H., Giorgini, P. (2007) Secure Tropos: A Security-Oriented Extension of the Tropos methodology, International Journal of Software Engineering and Knowledge Engineering (IJSEKE) 17(2) pp. 285-309, World Scientific, 2007.
47. Nooteboom, B. (2002). Trust: Forms, Foundations, Functions, Failures and Figures. Edward Elgar.
48. Nooteboom, B. (2005) Framing, attribution and scripts in the development of trust. In. Proc. of symposium on 'Risk, trust and civility', Victoria College, University of Toronto, 6-8 May 2005.
49. Norman, D. A. (1988). The Psychology of Everyday Things. New York: Basic Books.
50. Pearson, S. (2002). Trusted Computing Platforms: TCPA Technology. In Context. Upper Saddle River, NJ: Prentice-Hall.
51. Persse, J. R. (2001). Implementing the Capability Maturity Model. New York: Wiley.
52. Petland, S., & Heibeck, T. (2008, Fall). Understanding 'Honest Signals' in Business. MIT Sloan Management Review., 50(1), 70-75.
53. Potter, N. N. (2002). How Can I Be Trusted?: A Virtue Theory Of Trustworthiness. Rowman & Littlefield Publishers.
54. Resnick, P. (2006, Jun). The value of reputation on eBay: a controlled experiment. Experimental Economics, 9(Issue 2), 79-101. Available at http://www.si.umich.edu/~presnick/papers/postcards/PostcardsFinalPrePub.pdf. doi:10.1007/s10683-006-4309-2
55. Saunders, M. N. K., & Thornhill, A. (2003). Organisational justice, trust and the management of change: An exploration. Personnel Review, 32(3), 360-375. doi:10.1108/00483480310467660
56. Seppanen, R., & Blomqvist, K. (2006) It is not all About Trust-The Role of Distrust in Inter-Organizational Relationships. In: Network-Centric Collaboration and Supporting Frameworks, proc. of IFIP TC5 WG 5.5 Seventh IFlP Working Conference on Virtual Enterprises, 25'27 September 2006, Helsinki, Finland. Springer Boston.
57. Ullmann-Margalit, E. (2003) Trust out of distrust. Available at: www.law.nyu.edu/clppt/program2001/readings/ullman_margalit/Trust%20out%20of%20Distrust.pdf
58. Venkatesh, V., Morris, M. G., Davis, G. B., & Davis, F. D. (2003). User acceptance of information technology: Toward a unified view. Management Information Systems Quarterly, 27(3), 425-478.
59. Willcocks, L. P., & Cullen, S. (2006) The Outsourcing Enterprise: The Power of Relationships. Available: http://www.logicacmg.com/pSecured/admin/countries/assets/serve_asset.asp?id=3252.