Trust Management Tools for Internet Applications

Lecture notes in computer sciencePublished 1 January 2003

Tyrone Grandison, Morris Sloman

DOI10.1007/3-540-44875-6_7

Source URL

Citations164

SJR quartileQ2

SJR score0.35

SNIP0.55

TL;DR

The SULTAN trust management toolkit for the specification, analysis and monitoring of trust specifications is presented and the following components of the toolkit are presented: the Specification Editor, the Analysis Tool, the Risk Service and the Monitoring Service.

Abstract

Trust management has received a lot of attention recently as it is an important component of decision making for electronic commerce, Internet interactions and electronic contract negotiation. However, appropriate tools are needed to effectively specify and manage trust relationships. They should facilitate the analysis of trust specification for conflicts and should enable information on risk and experience information to be used to help in decision-making. High-level trust specifications may also be refined to lower-level implementation policies about access control, authentication and encryption. In this paper, we present the SULTAN trust management toolkit for the specification, analysis and monitoring of trust specifications. This paper will present the following components of the toolkit: the Specification Editor, the Analysis Tool, the Risk Service and the Monitoring Service.

Keywords

Social SciencesComputer Science

IEEE Communications Surveys & TutorialsA survey of trust in internet applications

1,149 Citations2000Tyrone Grandison, Morris Sloman

This survey examines the various definitions of trust in the literature and provides a working definition of trust for Internet applications and some influential examples of trust management systems.

The KeyNote Trust-Management System Version 2

657 Citations1999Matt Blaze, Joan Feigenbaum +2 more

This memo describes version 2 of the KeyNote trust-management system, which specifies the syntax and semantics of KeyNote `assertions', describes `action attribute' processing, and outlines the application architecture into which a KeyNote implementation can be fit.

Lecture notes in computer scienceKeyNote: Trust Management for Public-Key Infrastructures

358 Citations1998Matt Blaze, Joan Feigenbaum +1 more

The rationale for designing a simple trust-management system for public-key infrastructures, called KeyNote, based on the motivating principles are expressibility, simplicity, and extensibility is discussed.

The right type of trust for distributed systems

312 Citations1996Audun Jøsang

This paper examines the types of trust and trust relationships which are relevant for information security and shows that it is a very complex concept with many interesting and important implications.

View PDF

SD3: a trust management system with certified evaluation

272 Citations2002Trevor Jim

SD3, a trust management system consisting of a high-level policy language, a local policy evaluation, and a certificate retrieval system, is introduced and it is shown how to implement a secure name service entirely in SD3.

Advances in distributed computing and middlewareDistributed Systems for System Architects

204 Citations2001Paulo Verı́ssimo, Luı́s Rodrigues

The distributed systems architect assembles pieces of hardware that are at least as large as a computer or a network router, and assigns pieces of software that are self-contained - such as Java applets - to those hardware components.

SableCC, an object-oriented compiler framework

182 Citations2002Étienne Gagnon, Laurie Hendren

SableCC, an object-oriented framework that generates compilers (and interpreters) in the Java programming language is introduced and it is concluded that the use of object- oriented techniques significantly reduces the length of the programmer written code, can shorten the development time and makes the code easier to read and maintain.

View PDF

Lecture notes in computer scienceA subjective metric of authentication

118 Citations1998Audun Jøsang

A method for computing authenticity measures based on certificates, on key binding, and on trust relationships, which includes the opinion model which is a radically new way of representing trust, and subjective logic which consists of a set of logical operators for combining opinions.

IFIP advances in information and communication technologySpecifying and Analysing Trust for Internet Applications

90 Citations2003Tyrone Grandison, Morris Sloman

SULTAN (Simple Universal Logic-oriented Trust Analysis Notation) is an abstract, logic-oriented notation designed to facilitate the specification and analysis of trust relationships.

An axiomatic basis of trust in distributed systems

59 Citations2003P. Venkat Rangan

The author presents methods to map a formal trust specification on to mechanisms for its implementation in the distributed system, and shows how security specification and verification methods can be integrated into the presented theory of trust.