An Integration of Reputation-based and Policy-based Trust Management
Published 1 January 2005
Piero A. Bonatti, Claudiu Duma, Daniel Olmedilla, Nahid Shahmehri
Citations78
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
It is argued that an integrated approach to trust management would improve significantly trust management systems and illustrated how the two models are integrated in PROTUNE, the core policy specification language of the network of excellence.
Abstract
Abstract. Trust management is currently being tackled from two different perspectives: a “strong and crisp ” approach, where decisions are founded on logical rules and verifiable properties encoded in digital credentials, and a “soft and social ” approach, based on reputation measures gathered and shared by a distributed community. We analyze the differences between the two models of trust and argue that an integrated approach would improve significantly trust management systems. We support our claim with real world scenarios and illustrate how the two models are integrated in PROTUNE, the core policy specification language of the network of excellence REWERSE. 1
Keywords
Social SciencesComputer Science
Stirling Online Research Repository (University of Stirling)Formalising Trust as a Computational Concept
1,445 Citations1994Stephen Marsh
The thesis presents a testbed populated by simple trusting agents which substantiates the utility of the formalism and provides a step in the direction of a proper understanding and definition of human trust.
Supporting trust in virtual communities
1,343 Citations2005A Abdul-Rahman, Stephen Hailes
This paper provides and discusses a trust model that is grounded in real-world social trust characteristics, and based on a reputation mechanism, or word-of-mouth, and allows agents to progressively tune their understanding of another agent's subjective recommendations.
Managing trust in a peer-2-peer information system
900 Citations2001Karl Aberer, Zoran Despotovic
It is expected that scalable methods for trust management are an important factor, if fully decentralized peer-to-peer systems should become the platform for more serious applications than simple file exchange.
Lecture notes in computer scienceValuation of trust in open networks
656 Citations1994Thomas Beth, Malte Borcherding +1 more
A method for the valuation of trustworthiness which can be used to accept or reject an entity as being suitable for sensitive tasks is presented, an extension of the work of Yahalom, Klein and Beth.
Lecture notes in computer scienceP-Grid: A Self-Organizing Access Structure for P2P Information Systems
480 Citations2001Karl Aberer
This paper introduces P-Grid, a scalable access structure that is specifically designed for Peer-To-Peer information systems, which provide reliable data access even with unreliable peers, and scale gracefully both in storage and communication cost.
RT: a Role-based Trust-management framework
263 Citations2004Ninghui Li, John C. Mitchell
This paper provides a general overview of the RT Role-based Trust-management framework, combining some aspects described in previous publications with recent improvements and explanation of motivating applications.
Lecture notes in computer scienceDatalog with Constraints: A Foundation for Trust Management Languages
252 Citations2002Ninghui Li, John C. Mitchell
The class of linearly decomposable unary constraint domains are defined, it is proved that DATALOG extended with constraints in any combination of such constraint domains is tractable, and it is shown that permissions associated with structured resources fall into this class.
EigenRep: Reputation Management in P2P Networks
246 Citations2003Sepandar Kamvar, Mario Schlösser +1 more
An algorithm to decrease the number of downloads of inauthentic files in a peer-to-peer file-sharing network that assigns each peer a unique global reputation value, based on the peer’s history of uploads is described.
Regulating service access and information release on the Web
187 Citations2000Piero A. Bonatti, Pierangela Samarati
This work proposes an approach for regulating service access and information disclosure on the Web that consists of a uniform formal framework that provides a means for parties to communicate their requirements while ensuring that no private information be disclosed and that the communicated requirements are correct.
Driving and Monitoring Provisional Trust Negotiation with Metapolicies
139 Citations2005Piero A. Bonatti, Daniel Olmedilla
This work introduces the provisional trust negotiation framework PROTUNE, for combining distributed trust management policies with provisional-style business rules and access-control related actions and integrity constraints for monitoring negotiations and credential disclosure.
Lecture notes in computer scienceNo Registration Needed: How to Use Declarative Policies and Negotiation to Access Sensitive Resources on the Semantic Web
122 Citations2004Rita Gavriloaie, Wolfgang Nejdl +3 more
This paper shows how an explicit registration step can be avoided on the Semantic Web by using appropriate semantic annotations, rule-oriented access control policies, and automated trust negotiation.
Walking the Web of trust
120 Citations2002Germano Caronni
The paper concludes with the presentation of an efficient, sub-exponential algorithm that allows heuristic computations of trust paths in a web of trust.
IEEE Intelligent SystemsThe Pudding of Trust
114 Citations2004Steffen Staab, Bharat Bhargava +10 more
The challenge for exploiting trust in computing lies in extending the use of trust-based solutions, first to artificial entities such as software agents or subsystems, then to human users' subconscious choices.
IFIP advances in information and communication technologySpecifying and Analysing Trust for Internet Applications
90 Citations2003Tyrone Grandison, Morris Sloman
SULTAN (Simple Universal Logic-oriented Trust Analysis Notation) is an abstract, logic-oriented notation designed to facilitate the specification and analysis of trust relationships.
Dynamic Trust Metrics for Peer-to-Peer Systems
70 Citations2006Claudiu Duma, Nahid Shahmehri +1 more
This paper investigates the requirements on the dynamics of trust in P2P systems and proposes a versatile trust metric which satisfies these requirements and is capable to detect and penalize both the sudden changes in peers' behavior and their potential oscillatory malicious behavior.
Yokohama Medical BulletinRule-based Policy Specification : State of the Art and Future Work
22 Citations2004Piero A. Bonatti, Nahid Shahmehri +11 more
This report provides an overview of the existing approaches to logic and rule-based system behavior specification in the light of the peculiar needs of business and security rules.