Trust Meta-Policies for Flexible and Dynamic Policy Based Trust Management

Quinn, Karl; Lewis, David; O’Sullivan, Declan; Wade, Vincent

doi:10.1109/policy.2006.37

Cited by 7 publications

(8 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our trust model we adopt the widely accepted definition of trust as relationship between a Trustor and a Trustee [16,17]. We define trust as the measurement of the belief from a trusting party point of view (trustor) with respect to a trusted party (trustee) focused on a specific trust aspect that possibly implies a benefit or a risk [9].…”

Section: Trustmentioning

confidence: 99%

“…Some trust models associate trust relationships with an isolated or combined measurement of the concepts of honesty, credibility, reputation, usability, competence, fit for purpose, reliability, and quality [20] [17]. Our trust model captures precisely all this different concepts with the definition of the different trust types, recommendations, and trust aspects.…”

Section: Trustmentioning

confidence: 99%

See 1 more Smart Citation

SecKit: A Model-based Security Toolkit for the Internet of Things

Neisse

Steri

Fovino

et al. 2015

Computers & Security

107

View full text Add to dashboard Cite

The control and protection of user data is a very important aspect in the design and deployment of the Internet of Things (IoT). The heterogeneity of IoT technologies, the large number of devices and systems, and the different types of users and roles create important challenges in this context. In particular, requirements of scalability, interoperability, trust and privacy are difficult to address even with the considerable amount of existing work both in the research and standardization community. In this paper we propose a Model-based Security Toolkit, which is integrated in a management framework for IoT devices, and supports specification and efficient evaluation of security policies to enable the protection of user data. Our framework is applied to a Smart City scenario in order to demonstrate its feasibility and performance.

show abstract

Section: Trustmentioning

confidence: 99%

Section: Trustmentioning

confidence: 99%

SecKit: A Model-based Security Toolkit for the Internet of Things

Neisse

Steri

Fovino

et al. 2015

Computers & Security

107

View full text Add to dashboard Cite

show abstract

“…Conditional statements take the form if <conditions to be satisfied>, then <execute an action>. Examples are presented in [7,8,25,26]. Policies described by such statements are verified and validated, as discussed in [27].…”

Section: Related Workmentioning

confidence: 99%

Toward a target and coupling function of three different Information Security Management Systems

Boehmer

2011

Concurrency and Computation

View full text Add to dashboard Cite

SUMMARY The limits of traditional (static) policies are well known in many areas of computer science and information security and are extensively discussed in the literature. Although some flexibility has been achieved with the introduction of dynamic policies, these efforts have only addressed a fraction of the requirements necessary to secure today's enterprises. Currently, no feedback mechanisms are in place to evaluate the effectiveness or economic impacts of static or dynamic policy implementation. Here, we address the requirement for feedback and present a policy for the next generation. This is a policy that includes a dynamic feedback response to the effectiveness of changes. The structure of this new type of policy, called a ‘management system’, is borrowed from discrete event system theory and functions as a control loop. A management system consists of four elements (control system, sensor, controller, and actuator) that are involved in a control law. In this article, we present also an analytical description of the optimal structure through which the three management systems (Information Security Management System (ISMS), Business Continuity Management System, and IT Service Management) should be linked in a company. We define a coupling parameter and, using an equation for the discrete control loop, show that ISMS and IT Service Management should ideally be strongly coupled, and ISMS and Business Continuity Management System should be weakly coupled. Furthermore, two types of management system can be defined. A simple management system (1 st order management system) responds to and regulates only perturbations. An advanced management system (2 nd order management system) has an overarching target function that influences the controller. This target function is usually economically oriented. Copyright © 2011 John Wiley & Sons, Ltd.

show abstract

“…We formalize trust as a relationship between two entities, the Trustor and the Trustee, as widely accepted by the literature [48,2,68,107]. In this thesis, we define trust as the measurement of the belief from a trusting party point of view (trustor) with respect to a trusted party (trustee) focused on a specific trust aspect that possibly implies a benefit or a risk.…”

Section: Trust Management Modelmentioning

confidence: 99%

“…Other trust concepts are also important and are considered future work in this thesis. A list of possible trust concepts and their correlations based on user studies can also be found in [107].…”

Section: Trust Management Modelmentioning

confidence: 99%

Trust and privacy management support for context-aware service platforms

Neisse¹

View full text Add to dashboard Cite

In a context-aware service platform, service providers adapt their services to the current situation of the service users using context information retrieved from context information providers. In such a service provisioning platform, important trust and privacy issues arise, because different entities responsible for different tasks have to collaborate in the provisioning of the services. Context information is privacy sensitive by nature, making the communication and processing of this information a potential privacy threat. The main goal of this thesis is to learn how to support users and providers of context-aware services in managing the trade-off between privacy protection and context-based service adaptation. More and more precise context information retrieved from trustworthy context information providers allows context-aware service provider to adapt their services more reliably. However, more and more precise context information also means a higher risk for the service users in case of a privacy violation

show abstract

Trust Meta-Policies for Flexible and Dynamic Policy Based Trust Management

Abstract: It is possible to impose the will of the user or administrator through the specification of policies.

Cited by 7 publications

References 7 publications

SecKit: A Model-based Security Toolkit for the Internet of Things

SecKit: A Model-based Security Toolkit for the Internet of Things

Toward a target and coupling function of three different Information Security Management Systems

Trust and privacy management support for context-aware service platforms

Contact Info

Product

Resources

About