Extending UML sequence diagrams to model trust-dependent behavior with the aim to support risk analysis

Authors:
Atle Refsdal;Ketil Stølen
Affiliations:
SINTEF ICT, P.O. Box 124 Blindern, 0314 Oslo, Norway and Department of Informatics, University of Oslo, Norway;SINTEF ICT, P.O. Box 124 Blindern, 0314 Oslo, Norway and Department of Informatics, University of Oslo, Norway
Venue:
Science of Computer Programming
Year:
2008

Citing 10
Cited 1

A logic of authentication

ACM Transactions on Computer Systems (TOCS)
A logic for uncertain probabilities

International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems
Belief-based risk analysis

ACSW Frontiers '04 Proceedings of the second workshop on Australasian information security, Data Mining and Web Intelligence, and Software Internationalisation - Volume 32
Refining UML interactions with underspecification and nondeterminism

Nordic Journal of Computing
Requirements engineering for trust management: model, methodology, and reasoning

International Journal of Information Security
Using model-based security analysis in component-oriented system development

Proceedings of the 2nd ACM workshop on Quality of protection
Probabilistic logic under uncertainty

CATS '07 Proceedings of the thirteenth Australasian symposium on Theory of computing - Volume 65
Specification and refinement of soft real-time requirements using sequence diagrams

FORMATS'05 Proceedings of the Third international conference on Formal Modeling and Analysis of Timed Systems
Can we manage trust?

iTrust'05 Proceedings of the Third international conference on Trust Management
Underspecification, inherent nondeterminism and probability in sequence diagrams

FMOODS'06 Proceedings of the 8th IFIP WG 6.1 international conference on Formal Methods for Open Object-Based Distributed Systems

Experiences from using a UML-based method for trust analysis in an industrial project on electronic procurement

Electronic Commerce Research

Quantified Score

Hi-index	0.00

Visualization

Abstract

UML sequence diagrams are intuitively simple and can be understood by most stakeholders, including end-users, decision makers, engineers and other parties involved in a risk analysis. Building on UML sequence diagrams and trying to maintain their intuitive simplicity, we propose a language for modeling systems where the trust considerations of actors play a major role. Trust considerations are integrated with behavioral descriptions in order to facilitate analysis of the trust considerations of the actors, as well as their resulting behavior. We claim that our language allows trust dependent behavior to be described at a level of abstraction suitable for communication between different groups of stakeholders in a risk analysis situation. Furthermore, we argue that the increased expressiveness is required to facilitate the kind of analysis necessary to properly weigh and treat trust dependent risk behavior.