A Survey on Trust-Based Web Service Provision Approaches
Published 1 July 2010
Nicola Dragoni
Citations28
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This paper reviews the field of trust-based Web Service selection, providing a structured classification of current approaches and highlighting the main limitations of each class and of the overall field, and advocates the need of a new approach based on a stronger notion of trust.
Abstract
The basic tenet of Service-Oriented Computing (SOC) is the possibility of building distributed applications on the Web by using Web Services as fundamental building blocks. The proliferation of such services is considered the second wave of evolution in the Internet age, moving the Web from a collection of pages to a collections of services. Consensus is growing that this Web Service "revolution" won't eventuate until we resolve trust-related issues. Indeed, the intrinsic openness of the SOC vision makes crucial to locate useful services and recognize them as trustworthy. In this paper we review the field of trust-based Web Service selection, providing a structured classification of current approaches and highlighting the main limitations of each class and of the overall field. As a result, we claim that a soft notion of trust lies behind such weaknesses and we advocate the need of a new approach based on a stronger (semantics-based) notion of trust.
Keywords
Social SciencesComputer Science
IEEE Transactions on Knowledge and Data EngineeringToward the next generation of recommender systems: a survey of the state-of-the-art and possible extensions
10,115 Citations2005Gediminas Adomavičius, Alexander Tuzhilin
This paper presents an overview of the field of recommender systems and describes the current generation of recommendation methods that are usually classified into the following three main categories: content-based, collaborative, and hybrid recommendation approaches.
The Eigentrust algorithm for reputation management in P2P networks
3,353 Citations2003Sepandar Kamvar, Mario Schlösser +1 more
An algorithm to decrease the number of downloads of inauthentic files in a peer-to-peer file-sharing network that assigns each peer a unique global trust value, based on the peer's history of uploads is described.
Decision Support SystemsA survey of trust and reputation systems for online service provision
3,306 Citations2005Audun Jøsang, Roslan Ismail +1 more
The purpose of this article is to give an overview of existing and proposed systems that can be used to derive measures of trust and reputation for Internet transactions, to analyse the current trends and developments in this area, and to propose a research agenda forTrust and reputation systems.
Communications of the ACMFab
2,927 Citations1997Marko Balabanović, Yoav Shoham
It is explained how a hybrid system can incorporate the advantages of both methods while inheriting the disadvantages of neither, and how the particular design of the Fab architecture brings two additional benefits.
BDI Agents: From Theory to Practice
2,347 Citations1995Anand S. Rao
This paper explores a particular type of rational agent, a BeliefDesire-Intention (BDI) agent, and integrates the theoretical foundations of BDI agents from both a quantitative decision-theoretic perspective and a symbolic reasoning perspective.
IEEE Transactions on Knowledge and Data EngineeringPeerTrust: Supporting Reputation-Based Trust for Peer-to-Peer Electronic Communities
1,784 Citations2004Li Xiong, Ling Liu
PeerTrust is presented - a reputation-based trust supporting framework, which includes a coherent adaptive trust model for quantifying and comparing the trustworthiness of peers based on a transaction-based feedback system, and a decentralized implementation of such a model over a structured P2P network.
Service‐Oriented Computing
1,162 Citations2004Munindar P. Singh, Michael N. Huhns
This paper presents a meta-answering of the principles of Service-Oriented Computing with a focus on how to model and manage engagement in the context of web services.
International Journal of Uncertainty Fuzziness and Knowledge-Based SystemsA LOGIC FOR UNCERTAIN PROBABILITIES
1,008 Citations2001Audun Jøsang
A framework which is called subjective logic uses elements from the Dempster-Shafer belief theory and it is shown that it is compatible with binary logic and probability calculus.
Autonomous Agents and Multi-Agent SystemsAn integrated trust and reputation model for open multi-agent systems
795 Citations2006Trung Dong Huynh, Nicholas R. Jennings +1 more
Fire, a trust and reputation model that integrates a number of information sources to produce a comprehensive assessment of an agent’s likely performance in open systems, is presented and is shown to help agents gain better utility than their benchmarks.
Design of a role-based trust-management framework
752 Citations2005Ninghui Li, John C. Mitchell +1 more
The RT framework, a family of role-based trust management languages for representing policies and credentials in distributed authorization, is introduced, and the semantics of credentials are defined by presenting a translation from credentials to Datalog rules.
Information & ManagementBeyond concern—a privacy-trust-behavioral intention model of electronic commerce
698 Citations2004Chang Liu, Jack T. Marchewka +2 more
A theoretical model is proposed and tested that considers an individual's perceptions of privacy and how it relates to his or her behavioral intention to make an online transaction and the results suggested strong support for the model.
Principles of trust for MAS: cognitive anatomy, social importance, and quantification
485 Citations2002Cristiano Castelfranchi, Rino Falcone
A principled quantification of trust is presented, based on its cognitive ingredients, to use this "degree of trust" as the basis for a rational decision to delegate or not to another agent.
Social Trust: A Cognitive Approach
387 Citations2001Rino Falcone, Cristiano Castelfranchi
REGRET: A reputation model for gregarious societies
383 Citations2001Jordi Sabater, Carles Sierra
A new model for reputation is proposed that takes into account the social dimension of agents and a hierarchical ontology structure and is a natural extension of other models currently being used in the area of electronic commerce.
Lecture notes in computer scienceFormal Analysis of Models for the Dynamics of Trust Based on Experiences
308 Citations1999Catholijn M. Jonker, Jan Treur
A formal framework is introduced for the analysis and specification of models for trust evolution and trust update and different properties of these models are formally defined.
ACM Transactions on Information and System SecuritySupporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation
302 Citations2003Ting Yu, Marianne Winslett +1 more
This paper shows how to model the information flow of a negotiation for use in analyzing strategy interoperation, and develops the theory for black-box propositional credentials as well as credentials with internal structure and for access control policies whose contents are (respectively are not) sensitive.
Lecture notes in computer scienceQoS-Based Service Selection and Ranking with Trust and Reputation Management
269 Citations2005Le‐Hung Vu, Manfred Hauswirth +1 more
This paper presents a new QoS-based semantic web service selection and ranking solution with the application of a trust and reputation management method to address the key issue to detect and deal with false ratings by dishonest providers and users.
IEEE Internet ComputingNegotiating trust in the Web
257 Citations2002Marianne Winslett, Ting Yu +6 more
This system is intended for use in any situation where two entities from different security domains need to establish trust - business-to-business and retail interactions, cooperative work and joint ventures, medical records, mobile computing, and so on.
IEEE Transactions on Knowledge and Data EngineeringTrust-X: A Peer-to-Peer Framework for Trust Establishment
237 Citations2004Elisa Bertino, Elena Ferrari +1 more
Trust-/spl Xscr/; is presented, a comprehensive XML-based framework for trust negotiations, specifically conceived for a peer-to-peer environment, and presents a number of innovative features, such as the support for protection of sensitive policies, the use of trust tickets to speed up the negotiation, and the support of different strategies to carry on a negotiation.
Information & ManagementBeyond concern: a privacy–trust–behavioral intention model of electronic commerce
225 Citations2004Chang Liu, Jack T. Marchewka +2 more
Simulated social control for secure Internet commerce
222 Citations1996Lars Rasmusson, Sverker Jansson
It is suggested that soft security such as social COIIt.rol has to be used to create secure open systems and is more robust than hard security mechnnisms such as passwo7.ds, who reveal everythi7Lg if they are bypassed.
A Review on Trust and Reputation for Web Service Selection
217 Citations2007Yao Wang, Julita Vassileva
The paper proposes a typology to classify trust and reputation systems using the three criteria, centralized or decentralized, person or resource, global or personalized, Inspired by the criteria.
Journal of Computer SecurityA uniform framework for regulating service access and information release on the Web
201 Citations2002Piero A. Bonatti, Pierangela Samarati
The approach consists of a uniform formal framework to formulate - and reason about - both service access and information disclosure constraints, which provides a means for parties to communicate their requirements while ensuring that no private information be disclosed and that the communicated requirements are correct with respect to the constraints.
Cassandra: distributed access control policies with tunable expressiveness
191 Citations2004M.Y. Becker, Peter Sewell
Cassandra is presented, a role-based trust management system with an elegant and readable policy specification language based on Datalog with constraints that can easily express a wide range of policies including role hierarchy, role delegation, separation of duties, cascading revocation, automatic credential discovery and trust negotiation.
IEEE Internet ComputingReputation Bootstrapping for Trust Establishment among Web Services
170 Citations2009Zaki Malik, Athman Bouguettaya
Different techniques for fairly and accurately bootstrapping newcomers' reputations in a service-oriented environment are examined and experimental results are presented that evaluate the proposed techniques.
Lecture notes in computer scienceIRS-III: A Broker for Semantic Web Services Based Applications
157 Citations2006Liliana Cabral, John Domingue +5 more
The IRS-III methodology for building applications using Semantic Web Services is described and illustrated through a use case on e-government.
International Joint Conference on Artificial IntelligenceTrust based recommender system for the semantic web
151 Citations2007Punam Bedi, Harmeet Kaur +1 more
The presented recommender system uses temporal ontologies that absorb the effect of changes in the ontologies due to the dynamic nature of domains, in addition to the benefits of ontologies.
Automated trust negotiation using cryptographic credentials
127 Citations2005Jiangtao Li, Ninghui Li +1 more
A policy language is introduced that enables negotiators to specify authorization requirements that must be met by an opponent to receive various amounts of information about certified attributes and the credentials that contain it, and supports the use of uncertified attributes.
ePrints Soton (University of Southampton)A computational trust model for multi-agent interactions based on confidence and reputation
121 Citations2003Sarvapali D. Ramchurn, Carles Sierra +2 more
A trust model, based on confidence and reputation, is developed and shown how it can be concretely applied, using fuzzy sets, to guide agents in evaluating past interactions and in establishing new contracts with one another.
Lecture notes in computer sciencePeerTrust: Automated Trust Negotiation for Peers on the Semantic Web
112 Citations2004Wolfgang Nejdl, Daniel Olmedilla +1 more
The PeerTrust language based upon distributed logic programs is described, and it is shown how PeerTrust can be used to support delegation, policy protection and negotiation strategies in the ELENA distributed eLearning environment.
Communications of the ACMCommunity-based service location
104 Citations2001Munindar P. Singh, Bin Yu +1 more
This article considers the problem of service location, and studies an approach that places the intelligence on the endpoints, enabling the users to locate desirable services based on trustworthy, personalized recommendations of their peers.
Using Recommendations for Managing Trust in Distributed Systems
102 Citations1997A Abdul-Rahman, Stephen Hailes
In this paper, it is explained why traditional network security mechanisms are incomplete in their function to manage trust, and a general model based on recommendations is provided to minimise this risk.
IEEE Transactions on Systems Man and Cybernetics - Part A Systems and HumansEngineering Self-Organizing Referral Networks for Trustworthy Service Selection
96 Citations2005Pınar Yolum, Munindar P. Singh
The observations of these simulations are formulated into design recommendations that can be used to develop robust, self-organizing referral networks, and how and when such authorities emerge is shown.
An access control framework for business processes for web services
80 Citations2003Hristo Koshutanski, Fabio Massacci
Looking at the access control field, good approximation of most components are found but not their synthesis into one access control architecture for business processes for web services, which is the contribution of this paper.
Computing in Science & EngineeringTrust negotiations: concepts, systems, and languages
80 Citations2004Elisa Bertino, Elena Ferrari +1 more
The authors present a model for trust negotiation systems, and delineate the desiderata that ideal trust negotiation systems should satisfy, and survey the most interesting proposals that have been presented so far.
International Conference on Semantic Computing (ICSC 2007)A Trust Based Methodology for Web Service Selection
73 Citations2007Stefania Galizia, Alessio Gugliotta +1 more
The aim is to enhance the capability-driven selection provided by current SWS frameworks with the introduction of trust-based selection criteria with the introduction of WSTO - Web Services Trust Ontology, which makes use of WSMO as reference ontology for representing Web Services.
PeerAccess
69 Citations2005Marianne Winslett, Charles C. Zhang +1 more
This paper introduces the PeerAccess framework for reasoning about authorization in open distributed systems, and shows how a parameterization of the framework can be used to reason about access to computational resources in a grid environment.
Lecture notes in computer scienceA Fuzzy Approach to a Belief-Based Trust Computation
66 Citations2003Rino Falcone, Giovanni Pezzulo +1 more
This paper shows a first implementation and advance of the socio-cognitive model of trust developed in [1, 2] using the so-called Fuzzy Cognitive Maps and shows how the different components may change and how their impact can change depending from the specific situation and from the agent personality.
ACM Transactions on Information and System SecurityPP-trust-X
66 Citations2007Anna Squicciarini, Elisa Bertino +3 more
This paper proposes a set of privacy-preserving features for inclusion in any trust negotiation system, such as the support for the P3P standard, as well as a number of innovative features, such a novel format for encoding digital credentials specifically designed for preserving privacy.
/spl Xscr/-TNL: an XML-based language for trust negotiations
58 Citations2004Elisa Bertino, Elena Ferrari +1 more
Trust-based service provider selection in open environments
53 Citations2007Holger Billhardt, Ramón Hermoso +2 more
This work advocates an experience-based approach for service provider selection, in which clients use trust and reputation mechanisms to infer expectations of future providers' behaviour from past experiences in similar situations.
Lecture notes in computer scienceExperiments in Building Experiential Trust in a Society of Objective-Trust Based Agents
50 Citations2001Mark Witkowski, Alexander Artikis +1 more
A notion of "objective trust" for Software Agents, that is trust of, or between, Agents based on actual experiences between those Agents, is developed to investigate three questions related to trust in Multi-Agent Systems (MAS).
Access control enforcement for conversation-based web services
48 Citations2006Massimo Mecella, Mourad Ouzzani +2 more
The concept of k-trustworthiness is introduced that defines the conversations for which a client can provide credentials maximizing the likelihood that it will eventually hit a final state and avoids situations where the client cannot progress in the conversation due to the lack of required security requirements.
A cognitive trust-based approach for Web service discovery and selection
47 Citations2005Akhtar Ali, Simone A. Ludwig +1 more
This paper introduces a novel framework for automated service discovery and selection of Web Services based on a user's trust policy, validated by a case study of data mining Web Services and evaluated by an empirical experiment.
Lecture notes in computer scienceTrust Negotiation for Semantic Web Services
46 Citations2005Daniel Olmedilla, Rubén Lara +2 more
This paper adds modelling elements to the Web Service Modeling Ontology (WSMO) in order to include trust information in the description of Semantic Web Services and proposes the use of the Peertrust language to decide if trust can be established between the requester and the service provider.
International Conference on Semantic Computing (ICSC 2007)Technical Program Committee
39 Citations2007
Interactive Access Control for Web Services
37 Citations2004Hristo Koshutanski, Fabio Massacci
Business Processes for Web Services (BPEL4WS) are the new paradigms for lightweight enterprise integration that cross organizational boundaries and are provided by entities that see each other just as business partners.
Collaborative automated trust negotiation in peer-to-peer systems
37 Citations2004Song Ye, Fillia Makedon +1 more
Lecture notes in computer scienceCombining Trust and Reputation Management for Web-Based Services
27 Citations2008Audun Jøsang, Touhid Bhuiyan +2 more
This paper describes how Bayesian reputation systems can be combined with trust modeling based on subjective logic to provide an integrated method for assessing the quality of online services.
Toward Trustworthy Web Services - Approaches, Weaknesses and Trust-By-Contract Framework
26 Citations2009Nicola Dragoni
This paper critically review the field of trust-based Web service selection, proposing a structured classification of the current approaches and highlighting their main weaknesses, and claiming that a “soft” notion of trust lies behind such weaknesses.
TheriogenologyHow to exploit ontologies in trust negotiation
23 Citations2004Travis Leithead, Wolfgang Nejdl +5 more
Preovulatory serum LH concentrations were lower in the IU versus IM group, but the proportion of cows that ovulated within 60 h was similar between these two groups, suggesting iu administration of GnRH may be an alternative route of delivery to synchronize ovulation in beef and dairy cattle.
A formal Framework for Trust management of Service-oriented Systems
20 Citations2007Liang Zheng-ping, Xiaoli Liu +3 more
A trust framework for designing trustworthy service oriented applications, including service selection and service behavior monitoring, is proposed, using quantitative trust degree model forservice selection and monitoring agents for the behavior surveillance.
Security-by-contract for web services
19 Citations2007Nicola Dragoni, Fabio Massacci
This paper proposes a novel negotiation framework where services, needed credentials, and behavioral constraints on the disclosure of privileges are bundled together and that clients and servers have a hierarchy of preferences among the different bundles.
Supporting Robust and Secure Interactions in Open Domains through Recovery of Trust Negotiations
18 Citations2007Anna Squicciarini, Alberto Trombetta +1 more
This work proposes an efficient and secure recovery mechanism for trust negotiation that is robustness and fault tolerance of trust negotiation systems, and proves that the protocols are secure with respect to integrity, and confidentiality and are idempotent.
Collaborative automated trust negotiation in peer-to-peer systems
10 Citations2004Song Ye, F. Makedon +1 more
This paper investigates building trust through automated trust negotiation, which is orthogonal to existing reputation-based approaches and introduces locally trusted third parties, which it is demonstrated can effectively promote successful trust negotiations in peer-to-peer systems.
2007 International Conference on Computational Intelligence and Security Workshops (CISW 2007)Trust Management and Service Selection in Pervasive Computing Environments
7 Citations2007Shangyuan Guan, Xiaoshe Dong +3 more
Service sharing with trust in pervasive environment
7 Citations2008Sheikh Iqbal Ahamed, Munirul M. Haque +1 more
A lightweight and distributed trust model based on recommendation is developed, which will guarantee that service providers can securely share an unlimited number of resources, limited only by their hardware and bandwidth limitations.
Computational Intelligence and SecurityTrust Management and Service Selection in Pervasive Computing Environments
6 Citations2007Shangyuan Guan, Xiaoshe Dong +3 more
This paper presents trust force to specify trust among interactive entities in a pervasive computing environment utilizing experience and knowledge in a social network and the Coulomb's law in real word, and presents a trust management and service selection model, named TMSS.
2006 IEEE International Conference on Service Operations and Logistics, and InformaticsTrust Issues in Service Oriented Environment
4 Citations2006Farookh Khadeer Hussain, Elizabeth Chang +1 more
The author gives an introduction to the concept of service oriented environment and discusses the different activities carried out in the SOE and different entities involved in SOE.