Trust Management: First International Conference, iTrust 2003, Heraklion, Crete, Greece, May 28-30, 2002, Proceedings (Lecture Notes in Computer Science, 2692)

Itrust Is An Information Society Technologies (ist) Working Group, Which Started On 1st Of August, 2002. The Working Group Is Being Funded As A Concerted Action/ Thematic Network By The Future And Emerging Technologies (fet) Unit Of The Ist Program. The Aim Of Itrust Is To Provide A Forum For Cross-disciplinary Investigation Of The Application Of Trust As A Means Of Establishing Security And Con?dence In The Global Computing Infrastructure, Recognizing Trust As A Crucial Enabler For Meaningful And Mutually Bene?cial Interactions. The Proposed Forum Is Intended To Bring Together Researchers With A Keen Interest In Complementary Aspects Of Trust, From Technology-oriented Disciplines And The ?elds Of Law, Social Sciences, And Philosophy. Hence Providing The C- Sortium Participants (and The Research Communities Associated With Them) With The Common Background Necessary For Advancing Toward An In-depth Underst- Ding Of The Fundamental Issues And Challenges In The Area Of Trust Management In Open Systems. Broadly The Initiative Aims To: РFacilitate The Cross-disciplinary Investigation Of Fundamental Issues Underp- Ning Computational Trust Models By Bringing Together Expertise From Te- Nology Oriented Sciences, Law, Philosophy, And Social Sciences РFacilitate The Emergence Of Widely Acceptable Trust Management Processes For Dynamic Open Systems And Applications РFacilitate The Development Of New Paradigms In The Area Of Dynamic Open Systems Which E?ectively Utilize Computational Trust Models РHelp The Incorporation Of Trust Management Elements In Existing Standards. Architecture And Algorithms For A Distributed Reputation System -- Regularity-based Trust In Cyberspace -- A Trust Matrix Model For Electronic Commerce -- Hardware Security Appliances For Trust -- Managing Trust And Reputation In The Xenoserver Open Platform -- Trust-based Protection Of Software Component Users And Designers -- Trust Management Tools For Internet Applications -- Trust-based Filtering For Augmented Reality -- Towards The Intimate Trust Advisor -- Trusting Collaboration In Global Computing Systems -- Trust, Reliance, Good Faith, And The Law -- Social Capital, Community Trust, And E-government Services -- Simulating The Effect Of Reputation Systems On E-markets -- Integrating Trustfulness And Decision Using Fuzzy Cognitive Maps -- Methodology To Bridge Different Domains Of Trust In Mobile Communications -- A Subjective Approach To Routing In P2p And Ad Hoc Networks -- Trust Propagation In Small Worlds -- Enforcing Collaboration In Peer-to-peer Routing Services -- Statistical Trustability (conceptual Work) -- An Introduction To Trust Negotiation -- Experience With The Keynote Trust Management System: Applications And Future Directions -- Fidelis: A Policy-driven Trust Management Framework -- Implementation Of An Agent-oriented Trust Management Infrastructure Based On A Hybrid Pki Model -- Authenticated Dictionaries For Fresh Attribute Credentials. Paddy Nixon, Sotirios Terzis (eds.). Includes Bibliographical References And Index. Trust Management Preface Organization Program Committee Table of Contents Architecture and Algorithms for a Distributed Reputation System Introduction Motivation and Problem Description Organization Contributions Terms and Definitions Trust in the Literature Reputation Experience Recommendation Usage Scenarios and Requirements Usage Scenarios Requirements of the Participants Models for Reputation Systems System Model Trust Model Knowledge Model Recommendations or Trusted Information Items System Interactions Dissemination of Request Collection of Recommendations Processing Each Received Recommendation Organizing the Results Feedback Handling Related Work Conclusions and Future Work Regularity-Based Trust in Cyberspace Introduction Towards Regularity-Based Trust in E-commerce -- An Example The Concept of Law-Governed Interaction (LGI) -- An Overview On the Nature of LGI Laws, and Their Decentralized Enforcement A Concept of Enforceable Obligation The Deployment of LGI The Language for Formulating Laws The Basis for Trust between Members of a Community Establishing Trustworthy Client-Server Interaction -- A Case Study On the Relationship between R-Trust and F-Trust Conclusion A Trust Matrix Model for Electronic Commerce 1 First Trade Transactions in Electronic Commerce Party Trust Control Trust 2 Trade Transaction Layers and Related Trust Issues Layer I: Communication Layer II: Trade Documents and Regulation Layer III: Business Relationship 3 Trust Matrix for First Trade Transactions in Electronic Commerce 4 Application of Trust Matrix to Trusted Third Parties 4.1 Dun & Bradstreet Example Trust Matrix of Dun & Bradstreet 4.2 Bolero Example Trust Matrix of Bolero 5 Conclusions References Hardware Security Appliances for Trust 1 Introduction 2 Related Work Trust in Outsourcing 3.1 Identity 3.2 Information Management 3.3 Summary 4 Hardware Security Appliances 5 Using HSAs 5.1 Order Processing 5.2 Receipting and Audit 5.3 Storage 5.4 Properties 6 Transformed Trust Model 7 Discussion and Current Status 8 Conclusions References Managing Trust and Reputation in the XenoServer Open Platform Introduction Contributions XenoPlatform Overview Threat Model XenoTrust Design Authoritative Trust Reputation-Based Trust Example Users of XenoTrust Discussion Deploying XenoTrust XenoTrust Implementation Funding XenoTrust Rule-Set Selection Load Balancing Related Work Conclusion Trust-Based Protection of Software Component Users and Designers Introduction Trust Management and Trust Value Computation Security Wrappers Trust Information Service Component User Evaluation Concluding Remarks Trust Management Tools for Internet Applications Introduction Overview of the SULTAN Trust Management Model Scenario Specification Editor Analysis Tool Risk Service Monitoring Service Related Work Conclusions and Future Work References Trust-Based Filtering for Augmented Reality Introduction Filtering Location Filtering Task-Directed Filtering Trust-Based Filtering Trust and Risk in the SECURE Project Framework Trust Recommendations Behaviour Models Trust Value Formats Augmented City Terminology Object/Application Classification Naming Data Structures Trust Values Trust Vector Observations Analysis Making Decisions Transferring Trust between Classes Recommendations Simplifications Dissemination of Information Recommendation Integrity Putting It All Together: Combining Evidence Conclusion Towards the Intimate Trust Advisor 1 Introduction 2 Themes 2.1 Computability of Trust 2.2 Evaluation of Trust 2.3 Architecture 2.4 Context Awareness 2.5 User Communication 3 Reference Architecture 3.1 Interaction Layer 3.2 Trust Layer 4 Use Cases 4.1 Business Trip 4.2 Wireless LAN 4.3 Visiting the Office 4.4 Ad Hoc Network 5 Definitions 5.1 Definition 1 ΠRelational Trust 5.2 Definition 2 ΠComputational Trust 6 Technical Architecture 6.1 Components 6.2 Information Flow 6.3 Configurations 7 Conclusions References Trusting Collaboration in Global Computing Systems Introduction Trust Sources of Trust Dynamic Aspects of Trust The Trust Model Trust Information Structure Collaboration Architecture Collaboration Request Analyser Recognition Mechanism Trust Formation Trust Exploitation for Risk Assessment Collaboration Monitoring Collaboration Evaluation Open Issues and Ongoing Work Conclusion References Trust, Reliance, Good Faith, and the Law Trust from a Legal Perspective Trust and the Law: Main Patterns of Interaction Behaviour-Trust and Situation-Trust: Classification Behaviour-Trust Grounded upon Legal Rules The Legal Protection of Reliance and Good Faith Protection of Situation-Trust and Connection with Behaviour-Trust The Limits of the Legal Protection of Trust Appendix: The Principle of Legal Appearance in Italian Law References Social Capital, Community Trust, and E-government Services Introduction Research Objectives Survey Methodology and Analysis Community Surveys Data Analysis Forms of Community Trust Community Services and Trust 'Antecedent' Factors Determining Community Trust Levels A Trust Propagation Cycle Some Implications for E-government Information Systems Levels of Interactivity Conclusion References Simulating the Effect of Reputation Systems on E-markets Introduction The Reputation System The Beta Distribution The Reputation Rating Combining Feedback Providing and Collecting Feedback Feedback Longevity Description of the Market Simulation Computing Transaction Gains Market Strategies Simulation Results Honesty and Reputation Snapshot of Seller Strategy, Rating, and Transactions Market Honesty Profit Discussion and Conclusion Integrating Trustfulness and Decision Using Fuzzy Cognitive Maps Introduction Why the Fuzzy Approach Scenarios Belief Sources Modelling Beliefs and Sources Beliefs and Sources Overview Overview of the Implementation Description of the Model Running the Model Experimental Setting Routine Visit Scenario Emergency Visit Scenario Trustfulness and Decision Decide Not to Delegate Trustfulness, Decision, and Personality Factors Personality Factors in the Decision Some Personalities Emotional Factors Some Experiments with Personalities Conclusions References Methodology to Bridge Different Domains of Trust in Mobile Communications 1 Introduction 2 Related Work 3 Definitions 3.1 Trusted Domain 3.2 Trusted Bridge 3.3 Personal Trusted Device Definition 3. Personal Trusted Device (PTD) 4 Methodology 5 Applicability 5.1 Mobile Trust Interaction (inside Mobile Terminal) 5.2 Mobile Services 5.3 Mobile Ad Hoc Networks (MANET) 6 Conclusions References A Subjective Approach to Routing in P2P and Ad Hoc Networks Introduction Network Model Trust Model Trust Values Building the Trust Model Inference: Spreading the Blame Selecting Routes A Better Model for Wireless Networks Risk Conclusion Subjective Logic Operator Definitions Trust Propagation in Small Worlds Introduction Small Worlds Small World Beginnings Identity and Search in Small Worlds Summary Trust-Based Security Mechanisms in Small Worlds Trust-Based Security Architecture Entity Recognition Trust-Based Admission Control Risk Assessment Trust Management Summary Conclusions and Future Work Enforcing Collaboration in Peer-to-Peer Routing Services Introduction Background Kademlia Service and Participation in Routing Substrates Enforcing Collaboration Securing Messages and Routing Tables The Structure of Trust Values Making Recommendations Observations and Interactions Trust Protocol Trust Computation Attacks Related Work Economic and Game-Theoretic Approaches Trust and Reputation Frameworks Levien's Stamp Trading Network Conclusion Statistical Trustability (Conceptual Work) Introduction The Underlying Trust Model Trust Storage and Exchange Adjusting Trust Application Scenario Conclusion and Outlook An Introduction to Trust Negotiation Target Interactions Digitization Example Issues Conclusions Experience with the KeyNote Trust Management System: Applications and Future Directions* Introduction A Trust-Management Approach to Access Control PolicyMaker The KeyNote Trust-Management System Applications of KeyNote Future Directions Concluding Remarks Fidelis: A Policy-Driven Trust Management Framework Introduction Fidelis Policy Framework Principals Trust Statements Trust Networks and Trust Conveyance Actions Policies Fidelis Policy Language Principal Representation of Trust Statements and Actions Trust Policies Action Policies Inference Semantics Discussion Related Work Conclusion and Future Work Implementation of an Agent-Oriented Trust Management Infrastructure Based on a Hybrid PKI Model Introduction Outline of the Hybrid PKI Model Implementation Objectives The Overall Architecture The Agent Core A Selected Operating Sequence: Acquiring Credentials Related Work, Conclusions, and Further Work Authenticated Dictionaries for Fresh Attribute Credentials* Introduction Considering Many Credential Issuers Our Contributions Background and Motivation Archiving and Time Stamping Certificate Validity Status Data Integrity Verification Credential Discovery in Permission Systems Some Simple-Minded Schemes Independent Authentication Fully-Trusted Central Repository A Multiply-Authored Authenticated Dictionary Minimally Compliant Authors Authors with Archive Data Maintaining Limited State at an Author Common Themes Discussion, Conclusions, and Additional Issues Push versus Pull for Author Updates User Subscription Offline versus Online Credential Sensitivity Locating Responders Conclusion Author Index This book constitutes the refereed proceedings of the First International Conference on Trust Management, iTrust 2003, held in Heraklion, Crete, Greece in May 2003. The 24 revised full papers presented were carefully reviewed and selected from 58 submissions. This first book devoted to the emerging interdisciplinary field of trust management spans the whole range of relevant topics, from technical issues in distributed and open systems to legal, social, and philosophical aspects