Extending Resource Access in Multi-Provider Networks Using Trust Management

Colombo, Maurizio; Martinelli, Fabio; Mori, Paolo; Martini, B.; Gharbaoui, M.; Castoldi, P.

doi:10.5121/ijcnc.2011.3309

Cited by 5 publications

(2 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Trust management is a broadly investigated topic for collaborative systems in the information technology area, e.g., peer-to-peer networks [9], intrusion detection networks [10] and multi-agent systems in e-market [11]. In the communication technology area, the most noteworthy research works regard the access control and trust management in multi-domain networks [12], [13] considering also the PCE architecture [14], [15]. However, the aforementioned works are mainly focused on authorization mechanisms and on regulating the grant of access rights.…”

Section: Introductionmentioning

confidence: 99%

Quality of interaction among path computation elements for trust-aware inter-provider cooperation

Fung

Martini

Gharbaoui

et al. 2014

2014 IEEE International Conference on Communications (ICC)

View full text Add to dashboard Cite

Path Computation Element (PCE) architecture enables effective traffic engineering in multi-domain networks while limiting the exposure of intra-domain information. However, returned path computations might reveal confidential information if artfully correlated by a malicious PCE. Thus, the selection of domains sequence as the result of PCEs cooperation should depend not only on the capability of providing quality paths but also on factors related to expected revenues or perceived risks. In this scenario, cooperation among PCEs could benefit from a trust model by evaluating the quality of the past interactions. This work introduces the concepts of Quality of Interaction and trust ranking and elaborates a trust management model including effectiveness and security objectives regulating the cooperation among PCEs. Specifically, the proposed trust model aims at stimulating effective interactions among PCEs as a result of a common interest in contributing to successful and profitable path computations while avoiding misuse of path computation services. The simulation results show that our trust model is effective in detecting malicious PCE thereby tuning the amount of information returned in the path computation replies.

show abstract

Section: Introductionmentioning

confidence: 99%

Quality of interaction among path computation elements for trust-aware inter-provider cooperation

Fung

Martini

Gharbaoui

et al. 2014

2014 IEEE International Conference on Communications (ICC)

View full text Add to dashboard Cite

show abstract

“…Moreover, it allows policy makers to express conditions that control the usage of resources, i.e., these conditions are continuously evaluated all along the access time, so that an access right can be revoked as soon as they are violated. The PolPA authorization system has been successfully adopted in several scenarios, such as the grid (Martinelli and Mori 2010), mobile devices (Castrucci et al 2008), and next-generation networks (Colombo et al 2011).…”

Section: Introductionmentioning

confidence: 99%

Testing of PolPA authorization systems

Bertolino

Daoudagh

Lonetti

et al. 2012

2012 7th International Workshop on Automation of Software Test (AST)

Self Cite

View full text Add to dashboard Cite

The implementation of an authorization system is a critical and error-prone activity that requires a careful verification and testing process. As a matter of fact, errors in the authorization system code could grant accesses that should instead be denied, thus jeopardizing the security of the protected system. In this paper, we address the testing of the implementation of the Policy Decision Point (PDP) within the PolPA authorization system that enables history-based and usage-based control of accesses. Accordingly, we propose two testing strategies specifically conceived for validating the history-based access control and the usage control functionalities of the PolPA PDP. The former is based on a fault model able to highlight the problems and vulnerabilities that could occur during the PDP implementation. The latter combines the standard technique for conditions coverage with a methodology for simulating the continuous control of the PDP during the runtime execution. Both strategies are implemented within a testing framework supporting the automatic generation and execution of security test suites. Results produced by the application of this testing framework to a real case study are presented.

show abstract